JGSvulns.txt

`  
  
[SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)  
  
Vendor: JGS-XA  
URL: http://www.jgs-xa.de/  
Version: <= 3.0.2  
Type: SQL-Injections, XSS and Full Path Disclosures  
  
Discovered by deluxe89 and the Security-Project Team  
  
  
  
Description:  
-------------------------  
The JGS-Portal is a high customisable Portal for the Woltlab Burning Board.  
  
  
  
  
SQL-Injections:  
-------------------------  
/jgs_portal.php?anzahl_beitraege=[SQL-Injection]  
/jgs_portal_statistik.php?meinaction=mitglieder&month=1&year=1[SQL-Injection]  
/jgs_portal_statistik.php?meinaction=themen&month=1&year=1[SQL-Injection]  
/jgs_portal_statistik.php?meinaction=beitrag&month=1&year=1[SQL-Injection]  
/jgs_portal_beitraggraf.php?month=1&year=1[SQL-Injection]  
/jgs_portal_viewsgraf.php?jahr=1&monat=1&tag=1[SQL-Injection]  
/jgs_portal_themengraf.php?month=1&year=1[SQL-Injection]  
/jgs_portal_mitgraf.php?month=1&year=1[SQL-Injection]  
/jgs_portal_sponsor.php?id=[SQL-Injection]  
  
/jgs_portal_log.php  
"Accept-Language"-Header SQL-Injection, the first two chars  
  
JGS-Portal Version <= 3.0.1 SQL-Injection Vulnerability:  
/jgs_portal_box.php?id=[SQL-Injection]  
  
Many SQL-Injections are exploitable.  
  
  
  
Cross Site Scripting:  
-------------------------  
You can abuse the SQL-Injections for XSS attacks.  
  
  
  
  
Full Path Disclosures:  
-------------------------  
/jgs_portal_ref.php  
/jgs_portal_land.php  
/jgs_portal_log.php  
/jgs_portal_global_sponsor.php  
/jgs_portal_global.php  
/jgs_portal_system.php  
/jgs_portal_views.php  
/jgs_portal_include/jgs_portal_boardmenue.php  
/jgs_portal_include/jgs_portal_forenliste.php  
/jgs_portal_include/jgs_portal_geburtstag.php  
/jgs_portal_include/jgs_portal_guckloch.php  
/jgs_portal_include/jgs_portal_kalender.php  
/jgs_portal_include/jgs_portal_letztethemen.php  
/jgs_portal_include/jgs_portal_links.php  
/jgs_portal_include/jgs_portal_neustemember.php  
/jgs_portal_include/jgs_portal_newsboard.php  
/jgs_portal_include/jgs_portal_online.php  
/jgs_portal_include/jgs_portal_pn.php  
/jgs_portal_include/jgs_portal_portalmenue.php  
/jgs_portal_include/jgs_portal_styles.php  
/jgs_portal_include/jgs_portal_suchen.php  
/jgs_portal_include/jgs_portal_team.php  
/jgs_portal_include/jgs_portal_topforen.php  
/jgs_portal_include/jgs_portal_topposter.php  
/jgs_portal_include/jgs_portal_umfrage.php  
/jgs_portal_include/jgs_portal_useravatar.php  
/jgs_portal_include/jgs_portal_waronline.php  
/jgs_portal_include/jgs_portal_woonline.php  
/jgs_portal_include/jgs_portal_zufallsavatar.php  
  
  
  
Security-Project  
-------------------------  
Visit www.security-project.org  
`