phpbb-Auction module SQL injection
| phpbb-auction-sql-injection (20203) |  Medium Risk |
Description:
phpbb-Auction is vulnerable to SQL injection. A remote attacker could send a specially-crafted SQL statements to the auction_rating.php script using the u parameter or send a specially-crafted SQL statements to the auction_offer.php script using the ar parameter, which would allow the attacker to add, modify or delete data in the backend database.
Consequences:
Data Manipulation
Remedy:
No remedy available as of July 9, 2011.
References:
- phpbb-Auction Web site: phpbb-Auction - Official Website - Download, Support, Documentation :: phpbb-auction.com.
- BID-13283: PHPBB-Auction Module Auction_Rating.PHP SQL Injection Vulnerability
- BID-13284: PHPBB-Auction Module Auction_Offer.PHP SQL Injection Vulnerability
- CVE-2005-1234: Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to auction_rating.php or (2) ar parameter to action_offer.php.
- CVE-2005-1235: auction_my_auctions.php in phpbb-Auction 1.2m and earlier allows remote attackers to obtain sensitive information via an invalid mode parameter, which leaks the full path in a PHP error message.
- OSVDB ID: 15704: phpBB phpbb-Auction auction_rating.php u Variable SQL Injection
- OSVDB ID: 15705: phpBB phpbb-Auction auction_offer.php ar Variable SQL Injection
- OSVDB ID: 15706: phpBB phpbb-Auction auction_myauctions.php mode Variable Path Disclosure
- SA15029: phpBB phpbb-Auction Module SQL Injection Vulnerabilities
- SECTRACK ID: 1013779: phpBB Auction Mod Lets Remote Users Inject SQL Commands and Determine the Installation Path
Platforms Affected:
- phpbb-auction.com phpbb-Auction 1.2m
Reported:
Apr 20, 2005
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net