|
|
>> XMB Forum SQL Injection and Server Set Variable Overwrite Issues
|
Title : XMB Forum SQL Injection and Server Set Variable Overwrite Issues
VUPEN ID : VUPEN/ADV-2005-1368
CVE ID : CVE-2005-2574 - CVE-2005-2575
CWE ID : CWE-
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2005-08-10
|
Two vulnerabilities were identified in XMB Forum, which could be exploited by malicious users to conduct SQL injection attacks or overwrite server set variables.
This first issue is due to an input validation error in the "xmb.php" script when extracting variables, which may be exploited by attackers to overwrite server set variables via a specially crafted form (i.e. "_SERVER[REMOTE_ADDR]").
The second flaw is due to an input validation error in the "include/u2u.inc.php" script when processing a specially crafted "in" variable via the "u2u_select" parameter, which may be exploited by remote users to conduct SQL injection attacks.
Affected Products
XMB Forum version 1.9.1 and prior
Solution
Upgrade to version 1.9.10.
References
http://www.vupen.com/english/advisories/2005/1368
http://forums.xmbforum.com/viewthread.php?tid=754523
Credits
Vulnerabilities reported by Heintz
ChangeLog
2005-08-10 : Initial release
2009-01-17 : Updated Solution
Vulnerability Management
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback
If you have additional information or corrections for this security advisory please submit them via our contact form. | |
|
