e-moBLOG多个SQL注入漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1196265 漏洞类型 SQL注入
发布时间 2006-01-24 更新时间 2006-01-31
CVE编号 CVE-2006-0403 CNNVD-ID CNNVD-200601-312
漏洞平台 N/A CVSS评分 7.5
|漏洞来源
https://cxsecurity.com/issue/WLB-2006010057
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200601-312
|漏洞详情
e-moBLOG1.3中存在多个SQL注入漏洞,远程攻击者可以通过(1)index.php的monthy参数或(2)admin/index.php的login参数执行任意SQL命令。注意:某些消息来源将第1项报告为与"monthly"参数有关,但这是不正确的。
|漏洞EXP
New eVuln Advisory:
e-moBLOG SQL Injection Vulnerability
http://evuln.com/vulns/43/summary.html

--------------------Summary----------------

Software: e-moBLOG
Sowtware's Web Site: http://www.e-motionalis.net/
Versions: 1.3
Critical Level: Moderate
Type: Cross-Site Scripting
Class: Remote
Status: Unpatched
Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
eVuln ID: EV0043

-----------------Description---------------
Vulnerable script: index.php
Variable $monthy isn't properly sanitized before being used in a SQL query. This can be used to make any SQL query by injecting arbitrary SQL code.

Vulnerable script: admin/index.php
Variable $login isn't properly sanitized before being used in a SQL query. This can be used to make any SQL query by injecting arbitrary SQL code.

Condition: gpc_magic_quotes - off

--------------Exploit----------------------
Available at: http://evuln.com/vulns/43/exploit.html

--------------Solution---------------------
No Patch available.

--------------Credit-----------------------
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
|参考资料

来源:XF
名称:emoblog-index-sql-injection(24245)
链接:http://xforce.iss.net/xforce/xfdb/24245
来源:BID
名称:16344
链接:http://www.securityfocus.com/bid/16344
来源:VUPEN
名称:ADV-2006-0296
链接:http://www.frsirt.com/english/advisories/2006/0296
来源:SECTRACK
名称:1015524
链接:http://securitytracker.com/id?1015524
来源:SECUNIA
名称:18567
链接:http://secunia.com/advisories/18567
来源:MISC
链接:http://evuln.com/vulns/43/summary.html
来源:BUGTRAQ
名称:20060122[eVuln]e-moBLOGSQLInjectionVulnerability
链接:http://www.securityfocus.com/archive/1/archive/1/422938/100/0/threaded
来源:OSVDB
名称:22701
链接:http://www.osvdb.org/22701
来源:OSVDB
名称:22700
链接:http://www.osvdb.org/22700
来源:SREASON
名称:370
链接:http://securityreason.com/securityalert/370
来源:VIM
名称:20060125Theparameterine-moBLOGis"monthy"[sic]
链接:http://attrition.org/pipermail/vim/2006-January/000511.html