13.42.42 SQL INJECTION (SQLi) VULNERABILITY--ProjectCMS v1.0 Beta Final--> | |
y3nh4ck3r@gmail.comto bugtraq------------------------- SQL INJECTION (SQLi) VULNERABILITY--ProjectCMS v1.0 Beta Final--> ------------------------------ CMS INFORMATION: -->WEB: http://projectcms.org/ -->DOWNLOAD: http://projectcms.org/uploads/ -->DEMO: http://projectcms.org -->CATEGORY: CMS / Portal -->DESCRIPTION: ProjectCMS is an open source community project to create a simple content management system with an easy to follow install... -->RELEASED: 2009-04-29 CMS VULNERABILITY: -->TESTED ON: firefox 3 -->DORK: "Powered by ProjectCMS" -->CATEGORY: SQL INJECTION VULNERABILITY -->AFFECT VERSION: 1.0 Beta Final (maybe <= ?) -->Discovered Bug date: 2009-04-29 -->Reported Bug date: 2009-04-29 -->Fixed bug date: N/A -->Info patch: N/A -->Author: YEnH4ckEr -->mail: y3nh4ck3r[at]gmail[dot]com -->WEB/BLOG: N/A -->COMMENT: A mi novia Marijose...hermano,cunyada, padres (y amigos xD) por su apoyo. -->EXTRA-COMMENT: Gracias por aguantarme a todos! (Te kiero xikitiya!) ######################### //////////////////////// SQL INJECTION (SQLi): //////////////////////// ######################### <<<<---------++++++++++++++ Condition: magic_quotes_gpc=off +++++++++++++++++--------->>>> ----------- VULN FILE: ----------- ... $sn=$_GET["sn"]; if ( $sn == "" ) { $sn = "1"; } $sql="select sn,pagename,linktext, $result=mysql_query($sql,$ ... ------------------ PROOF OF CONCEPT: ------------------ http://[HOST]/[HOME_PATH]/ Return --> user and database, this last in title ;) ---------- EXPLOIT: ---------- http://[HOST]/[HOME_PATH]/ Return --> username:::password (md5 hash) of admin and database (in title too). <<<--------------------------- | |
|
Total comments: 1 | ||
| ||