ezcms 1.2 - Blind SQL Injection / Authentication Bypass
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2008-2920 | 14 Jun 200800:00 | – | circl |
| CVE-2008-2921 | 14 Jun 200800:00 | – | circl |
 | CVE-2008-2920 | 30 Jun 200818:00 | – | cve |
| CVE-2008-2921 | 30 Jun 200818:00 | – | cve |
 | CVE-2008-2920 | 30 Jun 200818:00 | – | cvelist |
| CVE-2008-2921 | 30 Jun 200818:00 | – | cvelist |
 | EUVD-2008-2913 | 7 Oct 202500:30 | – | euvd |
| EUVD-2008-2914 | 7 Oct 202500:30 | – | euvd |
 | CVE-2008-2920 | 30 Jun 200818:24 | – | nvd |
| CVE-2008-2921 | 30 Jun 200818:24 | – | nvd |
10
-[*]+================================================================================+[*]-
-[*]+ EZCMS <= 1.2 Multiple Remote Vulnerabilitys +[*]-
-[*]+================================================================================+[*]-
[*] Discovered By: t0pP8uZz
[*] Discovered On: 19 MAY 2008
[*] Script Download: http://eztechhelp.com
[*] DORK google/altavista: "Powered by EZCMS"
[*] Vendor Has Not Been Notified!
[*] DESCRIPTION:
EZCMS (all versions prior to date) suffers from 2 remote vulnerabilitys.
One of these being a BLIND Sql Injection in "index.php" and the "page" variable is injectable.
see example below.
The second one being a insecure filemanager, the filemanager is hidden away in admin, the devs
probarly thought no one would find it.. but here i am telling you ;)
see more below.
[*] Blind SQL Injection:
http://site.com/index.php?page=1 and 1=1
http://site.com/index.php?page=1 and 1=2
[*] Arbitrary Remote File Manager Access:
http://site.com/ezcms/admin/filemanager/
[*] NOTE/TIP:
no exploit coded for the blind injection, because no point due to you can get a easy shell
through the file manager, althou if your curious, use SQLMap. (check sourceforge)
the "File Manager" is a very easy to use bug, just browse to site.com/ezcms/admin/filemanager/
site.com being the actual site and you can upload/edit/delete/upload/move files/folders.
[*] GREETZ:
milw0rm.com, h4ck-y0u.org, CipherCrew !
[-] peace,
t0pP8uZz
-[*]+================================================================================+[*]-
-[*]+ EZCMS <= 1.2 Multiple Remote Vulnerabilitys +[*]-
-[*]+================================================================================+[*]-
# milw0rm.com [2008-06-14]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Dec 2016 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.02551