Re-Boot Design ASP Forum SQL Injection Vulnerability

Bugtraq ID:	8694
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 24 2003 12:00AM
Updated:	Sep 24 2003 12:00AM
Credit:	The discovery of this vulnerability has been creditedt to Bahaa Naamneh <[email protected]>.
Vulnerable:	Re-Boot Design ASP Forum 1.1
Not Vulnerable:

Re-Boot Design ASP Forum SQL Injection Vulnerability

It has been reported that Re-Boot Design ASP Forum is prone to SQL injection attacks. The problem likely occurs due to insufficient sanitization of user-supplied input during authentication. As a result, an attacker may be capable of accessing an arbitrary users account without supplying legitimate authentication credentials.

Re-Boot Design ASP Forum SQL Injection Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Re-Boot Design ASP Forum SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Re-Boot Design ASP Forum SQL Injection Vulnerability

References:

• Re-Boot Design Homepage (Re-Boot Design)
  
• Re-Boot Design ASP Forum SQL injection Vulnerability (Bahaa Naamneh )