Quick.Forum index.php Multiple Variable SQL Injection

2005-05-11T10:13:02
ID OSVDB:16326
Type osvdb
Reporter Lostmon Lords(Lostmon@gmail.com)
Modified 2005-05-11T10:13:02

Description

Vulnerability Description

Quick.Forum contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'iCategory' and 'page' variables in the 'index.php' script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

Solution Description

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Short Description

Quick.Forum contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'iCategory' and 'page' variables in the 'index.php' script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

Manual Testing Notes

http://[victim]/forum/index.php?p=&iCategory=3%20or%201=1 http://[victim]/forum/index.php?p=topicsList&page=4%20or%201=1 http://[victim]/forum/?p=&iCategory=2%20or%201=1

References:

Vendor URL: http://qc.dotgeek.org/os/index.php?p=productsQuickForum Secunia Advisory ID:15200 Related OSVDB ID: 16328 Related OSVDB ID: 16329 Related OSVDB ID: 16327 Other Advisory URL: http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html CVE-2005-1585