Does 2.5.13 fix SQL Injection in NukeSentinel 2.5.12?

Posted: Sat Sep 29, 2007 8:24 am

Does 2.5.13 fix the SQL injection described in http://forums.cnet.com/Software/5208-6132_102-0.html?forumID=32&threadID=265936&messageID=2594414#2594414

Quote:

NukeSentinel "write_ban()" SQL Injection
by Marianna Schmudlach Moderator - 9/28/07 8:57 AM
In reply to: VULNERABILITIES \ FIXES - September 28, 2007 by Marianna Schmudlach Moderator

Secunia Advisory: SA26990
Release Date: 2007-09-28

Critical:
Moderately critical
Impact: Manipulation of data

Where: From remote

Solution Status: Unpatched

Software: NukeScripts NukeSentinel 2.x

Description:
Janek Vind has reported a vulnerability in NukeSentinel, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed to the "admin" cookie in the "write_ban()" function in includes/nukesentinel.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerability is reported in version 2.5.12. Other versions may also be affected.

Solution:
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by:
Janek Vind a.k.a. waraxe

Original Advisory:
http://www.waraxe.us/advisory-58.html

Worker Joined: Feb 18, 2006 Posts: 155 Location: Virginia

Yeah, I was wondering why such a fast switch from .12 to .13

Must have been a bug in .12

registered · Posted: Sat Sep 29, 2007 9:40 am

Yes, the SQL injections have been corrected in .13.