Info

Disclosure

Feb 24, 2005

Discovery

Jan 01, 2001

Dates

Exploit

Feb 24, 2005

Solution

Unknown

Description

PunBB and BLOG:CMS contain a flaw that will allow a remote attacker to inject arbitrary SQL code. The problem is that multiple parameters in the 'register.php' script are not verified properly and will allow a remote attacker to inject or manipulate SQL queries.

Classification

Location: Remote/Network Access Required
Attack Type: Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Exploit: Exploit Available
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Upgrade to PunBB version 1.2.2 or higher or BLOG:CMS version 3.6.2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Rickard Andersson

PunBB

1.2.1

Radek Hulán

BLOG:CMS

3.6.0

References

Security Tracker: 1013294
Related OSVDB ID: 14129 14130 14131
Secunia Advisory ID: 14394 14538
ISS X-Force ID: 19473
CVE ID: 2005-0569 (see also: NVD)
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-02/0430.html
Vendor URL: http://blogcms.com/
http://www.punbb.org/
Vendor Specific News/Changelog Entry: http://blogcms.com/wiki/changelog
Vendor Specific Advisory URL: http://forums.punbb.org/viewtopic.php?id=6460&action=new

Credit

John Gumbel - johannes.gumbel.2873student.uu.se -

Direct URL: http://osvdb.org/36218