SimpleBlog v.2.1 SQL Injection Security VulnerabilityDescription1) Input passed to the "month" parameter isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Example:http://[host]/?view=archives&month=[samplecode]&year=2006 2) Input passed to various fields when posting a comment isn't properly sanitised before being used. This can be exploited to inject arbitrary HTML and script code, which will be executed in a user's browser session in context of an affected site when the malicious comment is viewed. Confirmed in version 2.1. Other versions may also be affected. Impact A remote user can execute SQL commands on the underlying database. References Secunia SA18488 Product Homepage View entire list of over 400 known Web Application Vulnerabilities and the specific technologies which they target. See Web Vulnerabilities in popular applications such as: WordPress, Tiki Wiki, PHPNuke, PHPMyAdmin, phpBB, Mambo, PHP-Fusion, Mantis, Invision Power Board Get latest new web vulnerabilities via RSS |
|
