vendor:
Geeklog
by:
Nine:Situations:Group::bookoo
7.5
CVSS
HIGH
Remote SQL Injection
89
CWE
Product Name: Geeklog
Affected Version From: Geeklog <= 1.5.2
Affected Version To: Geeklog <= 1.5.2
Patch Exists: NO
Related CWE: None provided
CPE: None provided
Platforms Tested: None provided
Unknown
Geeklog <= 1.5.2 savepreferences()/*blocks[] remote sql injection exploit
This exploit takes advantage of a remote SQL injection vulnerability in the savepreferences() function of Geeklog version 1.5.2 and earlier. The vulnerability allows an attacker to manipulate the $_POST[] variables passed to the function, potentially leading to unauthorized access or data manipulation. The vulnerability is located in the usersettings.php file, specifically near lines 1467-1480. The savepreferences() function does not properly sanitize user input, allowing for SQL injection attacks. This exploit sets various $_POST[] variables to specific values, bypassing any input validation or sanitization and potentially executing arbitrary SQL queries.
Mitigation:
To mitigate this vulnerability, it is recommended to upgrade to a version of Geeklog that is not affected by this issue. Additionally, input validation and sanitization should be implemented to prevent SQL injection attacks.