[SA22238] OpenBiblio Local File Inclusion and SQL Injection

TITLE: OpenBiblio Local File Inclusion and SQL Injection SECUNIA ADVISORY ID: SA22238 VERIFY ADVISORY: http://secunia.com/advisories/22238/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: OpenBiblio 0.x...

OpenBiblio < 0.5.2 Multiple Scripts Local File Inclusion

The remote host is running OpenBiblio, a free, automated library system written in PHP. The version of OpenBiblio installed on the remote host fails to sanitize user-supplied input to the 'tab' and 'page' parameters of the 'shared/header.php' and 'shared/help.php' scripts, respectively before usi...

CVE-2006-5149

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the page parameter to shared/help.php or 2 the tab parameter to shared/header.php...

CVE-2006-5150

SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-5150

CVE-2006-5150: SQL injection in the reports system of OpenBiblio prior to 0.5.2. Remote attackers with report privileges can execute arbitrary SQL via unspecified vectors. Impact is partial confidentiality/integrity/availability; CVSS vector indicates network access, low attack complexity, but us...

CVE-2006-5149

CVE-2006-5149 describes multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2. An attacker can cause local files to be included and executed by supplying a .dot dot (..) payload in either the page parameter to shared/help.php or the tab parameter to shared/header.php. This resul...

CVE-2006-5149: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the page parameter to shared/help.php or 2 the tab parameter to shared/header.php...

CVE-2006-5150: Undefined Security Weakness

SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors...