Home page logo
/

bugtraq logo Bugtraq mailing list archives

[eVuln] [V]Book Multiple Vulnerabilities
From: alex () evuln com
Date: 11 Apr 2006 14:13:32 -0000

New eVuln Advisory:
[V]Book Multiple Vulnerabilities
http://evuln.com/vulns/111/summary.html

--------------------Summary----------------
eVuln ID: EV0111
CVE: CVE-2006-1561 CVE-2006-1562 CVE-2006-1563
Software: [V]Book
Sowtware's Web Site: http://www.vscripts.pl/?id=vbook2
Versions: 2.0
Critical Level: Dangerous
Type: Multiple Vulnerabilities
Class: Remote
Status: Unpatched. No reply from developer(s)
PoC/Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)

-----------------Description---------------
1. SQL Injection.

Vulnerable script: index.php

Parameter x is not properly sanitized before being used in SQL query. This can be used to evaluate arbitrary SQL 
expression.

Condition: magic_quotes_gpc = off


2. Multiple Cross-Site Scripting.

Vulnerable Script: index.php

Parameters autor, www, temat, tresc are not properly sanitized. This can be used to post arbitrary HTML or web script 
code.


3. PHP Code Insertion.

Administrator has an ability to edit variable values from config.php file. This can be used to insert arbitrary PHP 
code into config file which executes by every php-script.

System access is possible.

Condition: magic_quotes_gpc = off


--------------PoC/Exploit----------------------
Available at: http://evuln.com/vulns/111/exploit.html

--------------Solution---------------------
No Patch available.

--------------Credit-----------------------
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)


Regards,
Aliaksandr Hartsuyeu
http://evuln.com - Penetration Testing Services
.


  By Date           By Thread  

Current thread:
  • [eVuln] [V]Book Multiple Vulnerabilities alex (Apr 11)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]