fusebox - 'ProductList.cfm?CatDisplay' SQL Injection

-----------------------------------------------------------------------------------------
[AJS_ADVISORIES_01&2010]
fusebox (ProductList.cfm?CatDisplay) Remote SQL Injection Vulnerability
-----------------------------------------------------------------------------------------

Author      
: Shamus
Date         : May, 29 th 2010
Location     : Solo
&& Jogjakarta, Indonesia
Web          :
http://antijasakom.org/forum
Critical Lvl : Moderate
Impact       :
-
Where        : From Remote
---------------------------------------------------------------------------



Affected
software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application :
-
version     : -
Vendor      : http://www.fusebox.org/
download   
: http://www.fusebox.org/go/getting-started/downloading-fusebox
Description
: Fusebox is the most popular framework for building ColdFusion and PHP
web applications.
"Fuseboxers" find that the framework releases
them from much of the drudgery of writing applications and enables them
to focus their efforts on creating great, customer-focused software.
--------------------------------------------------------------------------



Vulnerability:
~~~~~~~~~~~~
-

PoC/Exploit
:
~~~~~~~~~~

http://127.0.0.1/ProductList.cfm?CatDisplay=1%27[SQL
query]
http://127.0.0.1/[path]/ProductList.cfm?CatDisplay=1%27[SQL
query]


Dork:
~~~~~
Google : ProductList.cfm?CatDisplay


Solution:
~~~~~
-
N/A.


Timeline:
~~~~~~~

- 25 - 05 - 2010 bug found
-
29 - 05 - 2010 no vendor contacted
- 29 - 05 - 2010 advisory release
---------------------------------------------------------------------------



Shoutz:
~~~~~~~

oO0:::::
Greetz and Thanks: :::::0Oo.
Tuhan YME
My Parents
SPYRO_KiD
K-159
lirva32
newbie_campuz

And
Also My LuvLy :
..::.E.Z.R (The deepest Love I'v ever had..).::..

in
memorial :
1. Monique
2. Dewi S.
3. W. Devi Amelia
4. S.
Anna

oO0:::A hearthy handshake to: :::0Oo
~ Crack SKY Staff
~
Echo staff
~ antijasakom staff
~ jatimcrew staff
~ whitecyber
staff
~ lumajangcrew staff
~ unix_dbuger, boys_rvn1609, jaqk,
byz9991, bius, g4pt3k, anharku, wandi, 5yn_4ck, kiddies, bom2, untouch
~
arthemist, opt1lc, m_beben, gitulaw, luvrie, poniman_coy, ThePuzci,
x-ace, newbie_z, petunia, jomblo.k, hourexs_paloer, cupucyber,
kucinghitam, black_samuraixxx, ucrit_penyu, wendys182, cybermuttaqin
~
k3nz0, thomas_ipt2007, blackpaper, nakuragen, candra
~ whitehat,
wenkhairu, Agoes_doubleb, diki, lumajangcrew a.k.a adwisatya a.k.a
xyberbreaker, wahyu_antijasakom
~ Cruz3N, mywisdom,flyff666,
gunslinger_, ketek, chaer.newbie, petimati, gonzhack, spykit, xtr0nic,
N4ck0, assadotcom, Qrembiezs, d4y4x
~ All people in SMAN 3
~ All
members of spyrozone
~ All members of echo
~ All members of
newhack
~ All members of jatimcrew
~ All members of Anti-Jasakom
~
All members of whitecyber
~ All members of Devilzc0de
#e-c-h-o,
#K-elektronik, #newhack, #Solohackerlink, #YF, #defacer, #manadocoding,
#jatimcrew, #antijasakom, #whitecyber, #devilzc0de
---------------------------------------------------------------------------



Contact:
~~~~~~~~~

Shamus
: [email protected]
Homepage:
http://antijasakom.org/forum/viewtopic.php?f=38&t=600

--------------------------------
[ EOF ] ----------------------------------