New eVuln Advisory: aoblogger Multiple Vulnerabilities http://evuln.com/vulns/37/summary/bt/ --------------------Summary---------------- Software: aoblogger Sowtware's Web Site: http://mikeheltonisawesome.com/ Versions: 2.3 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (eVuln.com) eVuln ID: EV0037 -----------------Description--------------- 1. Arbitrary script code insertion is possible in BBcode [url] tag. [url] tag isn't properly sanitized. This can be used to post arbitrary script code. 2. SQL Injection is possible. Vulnerable script: login.php Variable $username isn't properly sanitized before being used in a SQL query. This can be used to make any SQL query by injecting arbitrary SQL code. Condition: gpc_magic_quotes - off 3. Unauthorized "New Entry" creation is possible. Vulnerable script: create.php This script checks variable $uza for existence and dont check username and password before adding new entry in database. --------------Exploit---------------------- Available at: http://evuln.com/vulns/37/exploit/bt/ --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
