Multiple vulnerabilities have been identified in Star Articles, which could be exploited by remote attackers to inject arbitrary SQL queries. These issues are caused by input validation errors in various scripts (e.g. "article.download.php") when processing user-supplied data, which could be exploited by malicious people to conduct SQL injection attacks.

Affected Products

Star Articles

Solution

VUPEN Security is not aware of any vendor-supplied patch.

References

http://www.vupen.com/english/advisories/2008/3269

Credits

Vulnerabilities reported by b3hz4d.

Changelog

2008-11-27 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.