Zone-H.org - Unrestricted Information - Open Business Management Multiple Vulnerabilities

Open Business Management Multiple Vulnerabilities

Wednesday, 07 June 2006

Description:
r0t has reported some vulnerabilities in Open Business Management, which can be exploited by malicious users to conduct SQL injection attacks and by malicious people to conduct cross-site scripting attacks.

1) Input passed to the "new_order" and "order_dir" parameters in company/company_index.php, group/group_index.php, list/list_index.php, and user/user_index.php is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) Input passed to the "tf_title", "tf_lang", and "tf_year" parameters in publication/publication_index.php, to the "tf_login", "tf_lastname", "tf_email", "tf_desc", and "tf_group" parameters in user/user_index.php, to the "tf_name", "tf_email", and "tf_contact" parameters in list/list_index.php, to the "tf_name", "tf_user", and "tf_email" parameters in group/group_index.php, and to the "tf_name", "tf_phone", "tf_zip", "tf_town", "tf_dateafter", "tf_datebefore", and "tf_cat_code" parameters in company/company_index.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerabilities have been reported in version 1.0.3pl1. Other versions may also be affected.

Solution:
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by:
r0t

Original Advisory:
http://secunia.com/advisories/20486/

Comments Index (Total Messages: 0)

Post Reply
Name:	Guest
Title:
Comment:
Enter this security word

Powered by a Zone-H(ified) version of AkoComment 3.0!

DISCLAIMER: Forum postings are the opinion of the posting author alone, and should not be taken as the opinion of Zone-h. The author is entirely and solely responsible for all content that he/she uploads, posts, or otherwise transmits via the website. Zone-h is not responsible for such content. However, Zone-h shall have the right, but not the obligation, to delete, move, or edit any content that violates this agreement or is otherwise objectionable as determined by Zone-h in its sole discretion and without notice.

< Prev		Next >

[ Back ]