Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: CMS / Portals :: bx2633.htm

cevado technologies real estate CMS SQL injection



cevado technologies real estate CMS SQL injection
cevado technologies real estate CMS SQL injection



I'm back, and I got more.=0D
SQL injection within some real estate CMS software.=0D
=0D
The vulnerability is present because of a failure to strip characters from the variables page_id and site_id resulting in exploitation by some simple blind SQLI.=0D
=0D
heres an example:=0D
=0D
www.example.com/index.php?site_id=null%20union%20all%20select%20username,password,3,4,5,6%20from%20users/*=0D 
=0D
The number of columns varies slightly, but you can always use good old 'order by' to find that out. The table names remain the same. =0D
=0D
I used the GET'd variable site_d, but page_id works as well. =0D
=0D
Cevado.com notified, no patch. =0D
=0D
Happy hunting. 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH