EV0055.txt

`New eVuln Advisory:  
Unknown Domain Shoutbox multiple XSS & SQL Injection Vulnerabilities  
http://evuln.com/vulns/55/summary.html  
  
--------------------Summary----------------  
eVuln ID: EV0055  
CVE: CVE-2006-0605 CVE-2006-0606  
Software: Shoutbox  
Sowtware's Web Site: http://www.unknowndomain.co.uk/  
Versions: 2005.07.21  
Critical Level: Moderate  
Type: Multiple Vulnerabilities  
Class: Remote  
Status: Unpatched  
Exploit: Not Available  
Solution: Not Available  
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)  
  
-----------------Description---------------  
Most of user defined data isn't properly sanitized. This can be used to make any SQL query by injecting arbitrary SQL code (authorization or viewing blog and forum) or insert any javascript code (when posting new messages).  
  
Condition for SQL Injections: magic_quotes_gpc - off  
  
--------------Exploit----------------------  
  
XSS Example:  
  
Link: http://host/shoutbox/index.php  
Handle: <XSS>  
Message: <XSS>  
  
SQL Injection Example:  
  
http://host/shoutbox/index.php? do=edit&id=99'% 20union%20select% 201,2,3,4,5/*  
  
--------------Solution---------------------  
No Patch available.  
  
--------------Credit-----------------------  
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)  
`