Secunia

Morocco Security Team has discovered two vulnerabilities in Pixel Motion Blog, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed to the "user" and "pass" parameters in "/admin/index.php", and to the "date" parameter in "index.php" isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Example:
http://[host]/index?mois=&annee=&date=[sql]

Successful exploitation allows logon to the admin page without requiring knowledge of the password.

The vulnerability has been confirmed in the latest available version.

Solution
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by
Morocco Security Team

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area