I'n Blog 之萬象真藏

ecunia Advisory:	SA27063
Release Date:	2007-10-05
Critical:	Moderately critical
Impact:	Manipulation of data
Where:	From remote
Solution Status:	Unpatched
Software:	Web Templates Management System 1.x
	This advisory is currently marked as unpatched! - Companies can be alerted when a patch is released!

Description:
home_edition2001 has reported a vulnerability in Web Templates Management System, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed to the "id" parameter in index.php (when "action" is set to "readmore") is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerability is reported in version 1.3. Other versions may also be affected.

Solution:
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by:
home_edition2001 a.k.a. (bius)

Original Advisory:
http://www.solpotcrew.org/adv/home_edition2001-adv-03.txt

http://secunia.com/advisories/27063/