|
QuickTicket multiple sql inj.
###############################################
Vuln. discovered by : r0t
Date: 27 June 2007
vendor:http://www.qt-cute.org/
orginal advisory:
http://pridels-team.blogspot.com/2007/06/quickticket-multiple-sql-inj.html
affected versions: tested on QuickTicket 1.2 build:20070621
other versions also can be affected.
###############################################
QuickTicket contains a flaw that allows a remote sql injection
attacks.Inputpassed to the "t","f" parameter in "qti_ind_post.php" and
"qti_ind_post_prt.php" isn't properly sanitised before being used in a SQL
query.
And Input passed to the "dir","order" parameter in "qti_ind_member.php" and
"id" parameter in "qti_usr.php" and "f" parameter in "qti_ind_topic.php"
isn't properly sanitised before being used in a SQL query..
This can be exploited to manipulate SQL queries by injecting arbitrary SQL
code.
###############################################
Solution:
Edit the source code to ensure that input is properly sanitised.
###############################################
|
