Secunia

Some vulnerabilities has been reported in ClipShare, which can be exploited by malicious people to conduct SQL injection attacks.

1) Input passed to the "UID" parameter in uprofile.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) Input passed to the "tid" parameter in group_posts.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Note: It was also reported that access to the "siteadmin/useredit.php" script is not correctly restricted, which can be exploited to e.g. change the passwords of users.

Solution
Reportedly, this has been fixed. Contact the vendor for more information.
Further details available in Customer Area

Provided and/or discovered by
1) Krit.
2) SuNHouSe2
Possibly unprotected "siteadmin/useredit.php" script reported by Pr0metheuS.

Changelog
Further details available in Customer Area

Original Advisory
Krit:
http://milw0rm.com/exploits/4830

Pr0metheuS:
http://milw0rm.com/exploits/4837

SuNHouSe2:
http://milw0rm.com/exploits/5839

Deep Links
Links available in Customer Area