| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20060117195257.10597.qmail@securityfocus.com> Date: 17 Jan 2006 19:52:57 -0000 From: alex@...ln.com To: bugtraq@...urityfocus.com Subject: [eVuln] aoblogger Multiple Vulnerabilities New eVuln Advisory: aoblogger Multiple Vulnerabilities http://evuln.com/vulns/37/summary/bt/ --------------------Summary---------------- Software: aoblogger Sowtware's Web Site: http://mikeheltonisawesome.com/ Versions: 2.3 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (eVuln.com) eVuln ID: EV0037 -----------------Description--------------- 1. Arbitrary script code insertion is possible in BBcode [url] tag. [url] tag isn't properly sanitized. This can be used to post arbitrary script code. 2. SQL Injection is possible. Vulnerable script: login.php Variable $username isn't properly sanitized before being used in a SQL query. This can be used to make any SQL query by injecting arbitrary SQL code. Condition: gpc_magic_quotes - off 3. Unauthorized "New Entry" creation is possible. Vulnerable script: create.php This script checks variable $uza for existence and dont check username and password before adding new entry in database. --------------Exploit---------------------- Available at: http://evuln.com/vulns/37/exploit/bt/ --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
Powered by blists - more mailing lists