OSVDB ID: 24787 Title: phpSurveyor save.php surveyid Parameter SQL Injection |
Info |
|
|
Dates |
||||
|
|
Description |
phpSurveyor contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'save.php' script not properly sanitizing user-supplied input to the 'surveyid' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database. Additionally, the attack can be leveraged to include arbitrary PHP code into the phpSurveyor log files which can then be executed by viewing the log files. Note that this requires the log files to be readable by the attacker and that the web server allows parsing of log files as PHP code. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure, Input Manipulation Impact: Loss of Confidentiality, Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified OSVDB: Web Related |
Solution |
Upgrade to version 0.996 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
austici.org - Personal Page