#VU10914 SQL injection in Bacula-Web - CVE-2017-15367
Published: March 9, 2018 / Updated: June 17, 2021
Vulnerability identifier: #VU10914
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Clear
CVE-ID: CVE-2017-15367
CWE-ID: CWE-89
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerable software:
Bacula-Web
Bacula-Web
Software vendor:
GNU
GNU
Description
The vulnerability allows a remote attacker to execute arbitrary SQL commands in web application database.
The vulnerability exists in the jobs.php script, along with other PHP scripts in Bacula-Web due to insufficient sanitization of user-supplied data in the pool_id parameter. A remote attacker can send a specially crafted GET request containing a malicious SQL statement to vulnerable script and execute arbitrary SQL commands in web application database.
Successful exploitation of the vulnerability may allow an attacker to gain administrative access to vulnerable web application.
Remediation
Update to version 8.0.0-rc2.