phpBugTracker 0.9 bug.php Multiple Parameter SQL Injection

2004-04-15T00:00:00
ID EDB-ID:24004
Type exploitdb
Reporter JeiAr
Modified 2004-04-15T00:00:00

Description

phpBugTracker 0.9 bug.php Multiple Parameter SQL Injection. Webapps exploit for php platform

                                        
                                            source: http://www.securityfocus.com/bid/10153/info
 
Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due to a failure of the application to properly sanitize user supplied input.
 
The SQL injection issues may allow a remote attacker to manipulate query logic, potentially leading to unauthorized access to sensitive information such as the administrator password hash or corruption of database data. SQL injection attacks may also potentially be used to exploit latent vulnerabilities in the underlying database implementation.
 
The cross-site scripting and HTML injection issues may allow an attacker to execute arbitrary script code in the browser of an unsuspecting user. It may be possible to steal the unsuspecting user's cookie-based authentication credentials, as well as other sensitive information. Other attacks may also be possible.

http://www.example.com/bug.php?op=vote&bugid=[SQL]
http://www.example.com/bug.php?op=viewvotes&bugid=[SQL]
http://www.example.com/user.php?op=delvote&bugid=[SQL]