phpBB GroupCP.PHP SQL Injection Vulnerability
BID:9314
Info
phpBB GroupCP.PHP SQL Injection Vulnerability
| Bugtraq ID: | 9314 |
| Class: | Input Validation Error |
| CVE: |
CVE-2003-1215 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 29 2003 12:00AM |
| Updated: | Jul 12 2009 12:56AM |
| Credit: | Discovery of this vulnerability has been credited to Jay Gates <[email protected]>. |
| Vulnerable: |
phpBB Group phpBB 2.0.7 phpBB Group phpBB 2.0.6 phpBB Group phpBB 2.0.5 phpBB Group phpBB 2.0.4 phpBB Group phpBB 2.0.3 phpBB Group phpBB 2.0.2 phpBB Group phpBB 2.0.1 phpBB Group phpBB 2.0 .0 phpBB Group phpBB 2.0 RC4 phpBB Group phpBB 2.0 RC3 phpBB Group phpBB 2.0 RC2 phpBB Group phpBB 2.0 RC1 phpBB Group phpBB 2.0 Beta 1 phpBB Group phpBB 1.4.4 phpBB Group phpBB 1.4.2 phpBB Group phpBB 1.4.1 phpBB Group phpBB 1.4 .0 phpBB Group phpBB 1.2.1 phpBB Group phpBB 1.2 .0 phpBB Group phpBB 1.0 .0 |
| Not Vulnerable: |
phpBB Group phpBB 2.0.6 c |
Discussion
phpBB GroupCP.PHP SQL Injection Vulnerability
A vulnerability has been reported to exist in the software that may allow a remote user who has group moderator privileges to inject malicious SQL syntax into database queries. The problem reportedly exists in parameters of the groupcp.php script. This issue is caused by insufficient sanitization of user-supplied data. A remote attacker may exploit this issue to influence SQL query logic to have unauthorized SQL queries executed in the database.
A vulnerability has been reported to exist in the software that may allow a remote user who has group moderator privileges to inject malicious SQL syntax into database queries. The problem reportedly exists in parameters of the groupcp.php script. This issue is caused by insufficient sanitization of user-supplied data. A remote attacker may exploit this issue to influence SQL query logic to have unauthorized SQL queries executed in the database.
Exploit / POC
phpBB GroupCP.PHP SQL Injection Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
phpBB GroupCP.PHP SQL Injection Vulnerability
Solution:
The vendor has released phpBB 2.0.6c to address this and other issues. Users are advised to upgrade to the fixed version.
phpBB Group phpBB 1.0 .0
phpBB Group phpBB 1.2 .0
phpBB Group phpBB 1.2.1
phpBB Group phpBB 1.4 .0
phpBB Group phpBB 1.4.1
phpBB Group phpBB 1.4.2
phpBB Group phpBB 1.4.4
phpBB Group phpBB 2.0 RC1
phpBB Group phpBB 2.0 RC3
phpBB Group phpBB 2.0 RC4
phpBB Group phpBB 2.0 Beta 1
phpBB Group phpBB 2.0 RC2
phpBB Group phpBB 2.0 .0
phpBB Group phpBB 2.0.1
phpBB Group phpBB 2.0.2
phpBB Group phpBB 2.0.3
phpBB Group phpBB 2.0.4
phpBB Group phpBB 2.0.5
phpBB Group phpBB 2.0.6
Solution:
The vendor has released phpBB 2.0.6c to address this and other issues. Users are advised to upgrade to the fixed version.
phpBB Group phpBB 1.0 .0
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 1.2 .0
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 1.2.1
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 1.4 .0
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 1.4.1
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 1.4.2
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 1.4.4
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0 RC1
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0 RC3
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0 RC4
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0 Beta 1
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0 RC2
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0 .0
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0.1
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0.2
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0.3
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0.4
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0.5
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
phpBB Group phpBB 2.0.6
-
phpBB Group phpBB-2.0.6.zip
http://prdownloads.sourceforge.net/phpbb/phpBB-2.0.6.zip?download
References
phpBB GroupCP.PHP SQL Injection Vulnerability
References:
References:
- phpBB privmsg.php XSS vulnerability patch. (=?iso-8859-1?q?Shaun=20Colley?=
) - SQL Injection in phpBB's groupcp.php (Jay Gates
)