Info

Disclosure

Nov 28, 2007

Discovery

Nov 25, 2007

Dates

Exploit

Nov 28, 2007

Solution

Unknown

Description

bcoos contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'modules/myalbum/ratephoto.php' script not properly sanitizing user-supplied input to the 'lid' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

Classification

Location: Remote / Network Access
Attack Type: Information Disclosure, Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity
Exploit: Exploit Public
Disclosure: Vendor Verified, Uncoordinated Disclosure
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

bcoos	bcoos	1.0.8
		1.0.9
		1.0.10
		1.0.11

References

CVE ID: 2007-6266 (see also: NVD)
Bugtraq ID: 26629
Secunia Advisory ID: 26945
ISS X-Force ID: 36752
Related OSVDB ID: 40313 40314 40316
Other Advisory URL: http://lostmon.blogspot.com/2007/11/bcoops-sql-injection-and-cross-site.html
Other Solution URL: http://lostmon.blogspot.com/2007/12/posible-patch-for-sql-injections-in.html
Vendor Specific News/Changelog Entry: http://www.bcoos.net/modules/news/

Credit

Lostmon Lords - Lostmongmail.com -

Direct URL: http://osvdb.org/40315