cevado technologies real estate CMS SQL injection

Type securityvulns
Reporter Securityvulns
Modified 2008-04-01T00:00:00


I'm back, and I got more. SQL injection within some real estate CMS software.

The vulnerability is present because of a failure to strip characters from the variables page_id and site_id resulting in exploitation by some simple blind SQLI.

heres an example:


The number of columns varies slightly, but you can always use good old 'order by' to find that out. The table names remain the same.

I used the GET'd variable site_d, but page_id works as well.

Cevado.com notified, no patch.

Happy hunting.