New eVuln Advisory:
CALimba Authentication Bypass Vulnerability
http://evuln.com/vulns/68/summary.html
--------------------Summary----------------
eVuln ID: EV0068
CVE: CVE-2006-0693
Software: CALimba
Sowtware's Web Site: http://www.errebit.com/opensource/index.php?rb=calimba
Versions: 0.99.2, 0.99.1 and earlier
Critical Level: Moderate
Type: SQL Injection
Class: Remote
Status: Unpatched. Developer(s) contacted.
Exploit: Available
Solution: Not Available
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
-----------------Description---------------
Vulnerable script: rb/cls/rb_auth.php
Variables $login $password are not properly sanitized before being used in a SQL query. This can be used to pass authorization or make any SQL query by injecting arbitrary SQL code.
Condition: magic_quotes_gpc - off
--------------Exploit----------------------
Available at: http://evuln.com/vulns/68/exploit.html
--------------Solution---------------------
No Patch available.
--------------Credit-----------------------
Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
Regards,
Aliaksandr Hartsuyeu
http://evuln.com - Penetration Testing Services
This information is provided for TESTING and LEGAL RESEARCH purposes only. All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum