Detections
Analytics
eggBlog _lib/user.php eb_login Function Cookie Handling SQL Injection
medium Nessus Plugin ID 31720
Language:
Synopsis
The remote web server contains a PHP application that is susceptible to a SQL injection attack.Description
The remote host is running eggBlog, a free PHP and MySQL blog software package.The version of eggBlog installed on the remote host fails to sanitize input to the 'email' and 'password' cookies before using it in the 'eb_login' function in '_lib/user.php' to perform database queries. Provided PHP's 'magic_quotes_gpc' setting is disabled, an attacker may be able to leverage this issue to manipulate database queries to disclose sensitive information, bypass authentication, modify data, or even attack the underlying database.
Solution
Upgrade to eggBlog 4.0.1 or later.See Also
Plugin Details
Severity: Medium
ID: 31720
File Name: eggblog_cookie_sql_injection.nasl
Version: 1.21
Type: remote
Family: CGI abuses
Published: 4/1/2008
Updated: 4/11/2022
Configuration: Enable thorough checks (optional)
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Reference Information
CVE: CVE-2008-1626
BID: 28497