Bug: sBlog SQL Injection and Path Disclosure Vulnerability ( Ascii Version )

Search:
WLB2

sBlog SQL Injection and Path Disclosure Vulnerability

Published
Credit
Risk
2006.05.05
admin subjectzero net
Medium
CWE
CVE
Local
Remote
CWE-89
CVE-2006-2189
No
Yes

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete

Summary:

Software: sBlog 0.7.2

Site: http://servous.se/

Description: sBlog is a simple and new PHP Blog.

Issue: Conducting a security benchmark on this open source software we have found that most of the versions of this
software is prone to SQL Injection attack through which an attacker can trigger back sensitive information as well as
gain administrative priviledges. The sql injection also discloses path information which may prove additional aid to the
attacker.An unauthenticated attacker may execute arbitrary SQL statements on the web. This may compromise the database
and expose sensitive information.

========================================

PROOF OF CONCEPT : http://www.subjectzero.net/research/sblog.htm

========================================

See this note in TXT Version

Bugtraq RSS
Bugtraq
 
REDDIT
REDDIT
 
DIGG
DIGG
 
LinkedIn
LinkedIn
 
CVE RSS
CVEMAP

Copyright 2014, cxsecurity.com
Ascii Version