Secunia

Charles FOL has discovered a vulnerability in Nuked-Klan, which can be exploited by malicious people to conduct SQL injection attacks and compromise a vulnerable system.

Input passed to the "Referer" HTTP header is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation allows e.g. getting administrator credentials, which further can be used to upload and execute arbitrary PHP scripts, but requires that "Level required to view the analyze of the visits" in General preferences is not set to "Disable".

The vulnerability is confirmed in versions 1.7.7 and SP4.4. Other versions may also be affected.

Solution
Set "Level required to view the analyze of the visits" in General preferences to "Disable".

Provided and/or discovered by
Charles FOL

Original Advisory
http://milw0rm.com/exploits/6749

Deep Links
Links available in Customer Area