symphonycms/symphony-2 — Issue #1039: Symphony Fatal Database Error
Author: Sillycone
Created: 2012-03-01 16:40:38+00:00
State: open

Hello,

There are a lot of database errors because input don't get sanitized.

Because of this an author could get sensitive information or maybe could inject sql.
There's no need to be administrator to trigger it.

Example in integration branch :
http://domain/symphony/blueprints/pages/edit/1'/

results : SELECT SQL_CACHE * FROM `sym_pages` AS p WHERE id IN ('1'') ORDER BY sortorder ASC

Example in current :
http://domain/symphony/blueprints/pages/edit/1'/

results : SELECT SQL_CACHE p.* FROM `sym_pages` AS p WHERE p.id = '(1')' LIMIT 1