Release Date: 2003-12-16
Critical: Moderately critical
Impact: Manipulation of data
Where: From remote
Software: Invision Power Top Site List 1.x
Description:
JeiAr has reported a vulnerability in Invision Power Top Site List, which potentially can be exploited by malicious people to manipulate data through HTTP.
The problem is that the "offset" parameter isn't properly validated. This can potentially be used to manipulate SQL queries.
Invision Power Top Site List 1.1 has been reported vulnerable.
Solution:
This vulnerability will be fixed in the next version.
Provided and/or discovered by:
Reported by JeiAr.
Source: Secunia