Re: phpSlash "story_id" Parameter Remote SQL Injection Vulnerability
Luis M <[email protected]> Sat, 24 Dec 2005 16:59:03 -0500
| Newsgroups | gmane.comp.cms.phpslash.user |
|---|---|
| Message-ID | <[email protected]> |
------=_Part_13379_29468490.1135461543069 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline I've committed a fix to CVS. Please test it and let me know if this fixes the problem. While fixing this issue, I noticed there are other unsafe arguments being passed to SQL without proper sanitation. I'll fix this as soon as possible. (today's a holiday :-)). On 12/22/05, tobozo <[email protected]> wrote: > > hi everyone > > I just caught this in my rss feed : > > http://pridels.blogspot.com/2005/12/phpslash-sql-vuln.html > http://www.frsirt.com/english/advisories/2005/3044 > > dunno what the exploit looks like, but I immediately made this > modification to my file Story.class > > function getStory($story_id, $mode, $argv_ary=3D"", $tpl=3D"") { > [+] $story_id =3D @(int) $story_id; > > > be well > > tobozo > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. Do you grep through log > files > for problems? Stop! Download the new AJAX search engine that makes > searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! > http://ads.osdn.com/?ad_id=3D7637&alloc_id=3D16865&op=3Dclick > _______________________________________________ > phpslash-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/phpslash-users > -- ----)(----- Luis M System Administrator Kiskeyix.org "We think basically you watch television to turn your brain off, and you work on your computer when you want to turn your brain on" -- Steve Jobs in an interview for MacWorld Magazine 2004-Feb No .doc: http://www.fsf.org/philosophy/no-word-attachments.es.html ------=_Part_13379_29468490.1135461543069 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline I've committed a fix to CVS. Please test it and let me know if this fixes t= he problem.<br> <br> While fixing this issue, I noticed there are other unsafe arguments being passed to SQL without proper sanitation. I'll fix this as soon as possible. (today's a holiday :-)).<br><br><div><span class=3D"gmail_quote">= On 12/22/05, <b class=3D"gmail_sendername">tobozo</b> <<a href=3D"mailto= :[email protected]">[email protected]</a>> wrote:</span><blockquote cl= ass=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, 204, 204); mar= gin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> hi everyone<br><br>I just caught this in my rss feed :<br><br><a href=3D"ht= tp://pridels.blogspot.com/2005/12/phpslash-sql-vuln.html">http://pridels.bl= ogspot.com/2005/12/phpslash-sql-vuln.html</a><br><a href=3D"http://www.frsi= rt.com/english/advisories/2005/3044"> http://www.frsirt.com/english/advisories/2005/3044</a><br><br>dunno what th= e exploit looks like, but I immediately made this<br>modification to my fil= e Story.class<br><br> function getStory($story_id, $= mode, $argv_ary=3D"", $tpl=3D"") { <br>[+] $story_id =3D @(int) $story_id;<= br><br><br>be well<br><br>tobozo<br><br><br><br><br>-----------------------= --------------------------------<br>This SF.net email is sponsored by: Splu= nk Inc. Do you grep through log files <br>for problems? Stop! Download the new AJAX search = engine that makes<br>searching your log files as easy as surfing the &= nbsp;web. DOWNLOAD SPLUNK!<br><a href=3D"http://ads.osdn.com/?ad= _id=3D7637&alloc_id=3D16865&op=3Dclick"> http://ads.osdn.com/?ad_id=3D7637&alloc_id=3D16865&op=3Dclick</a><b= r>_______________________________________________<br>phpslash-users mailing= list<br><a href=3D"mailto:[email protected]">phpslash-u= [email protected] </a><br><a href=3D"https://lists.sourceforge.net/lists/listinfo/phpslash-us= ers">https://lists.sourceforge.net/lists/listinfo/phpslash-users</a><br></b= lockquote></div><br><br clear=3D"all"><br>-- <br>----)(----- <br>Luis M<br> System Administrator<br><a href=3D"http://Kiskeyix.org">Kiskeyix.org</a> <b= r><br>"We think basically you watch television to turn your brain off, and you work on your computer when you want to turn your brain on" -- Steve Jobs in an interview for MacWorld Magazine 2004-Feb<br><br>No .doc: <a href= =3D"http://www.fsf.org/philosophy/no-word-attachments.es.html">http://www.f= sf.org/philosophy/no-word-attachments.es.html</a> ------=_Part_13379_29468490.1135461543069-- ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click