Secunia

Some vulnerabilities have been discovered in Scripteen Free Image Hosting Script, which can be exploited by malicious people to bypass certain security restrictions and conduct SQL injection attacks.

1) The application does not properly restrict access to the administration section. This can be exploited to bypass the login mechanism by setting the "cookid" cookie.

2) Input passed to the "username" and "password" parameters in admin/login.php, to the "uname" and "pass" parameter in login.php, and potentially other parameters in other files is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

The vulnerabilities are confirmed in version 1.2.1. Other versions may also be affected.

Solution
Edit the source code to ensure that access is properly restricted and input is properly sanitised.
Further details available in Customer Area

Provided and/or discovered by
1) RMx - Liz0zim
2) An anonymous person.

Changelog
Further details available in Customer Area

Original Advisory
1) http://milw0rm.com/exploits/6070

Deep Links
Links available in Customer Area