Woltlab Burning Book addentry.php SQL Injection

Advisory Information

Advisory name : Woltlab Burning Book addentry.php SQL Injection
Discovered by : drhankey / it-security23.net
Vendor Name : Woltlab
Vendor Homepage : http://www.woltlab.de
Software : Woltlab Burning Book Lite
Vulnerability Type : Cross-Site-Scripting
Vulnerable Versions : 1.0 Gold, 1.1.1e, maybe more
Platforms : OS Independent, PHP

What is Woltlab Burning Book ?

Woltlab Burning Board Lite is a free guestbook system.

Vulnerability Description:

When you post a message, addentry.php executes a SQL Query writing it in the db. The

user-agent is also saved, but not filtered. So its possible to modify the SQL Query when you

change your user-agent.