SkyPortal Classifieds System v0.12

vendor:

Classifieds System

by:

ByALBAYX

CVSS

HIGH

SQL Injection

CWE

Product Name: Classifieds System

Affected Version From: SkyPortal Classifieds System v0.12

Affected Version To: SkyPortal Classifieds System v0.12

Patch Exists: YES

Related CWE: N/A

CPE: skyportal.net/downloads/modules/mod_classifieds_0_12.zip

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

SkyPortal Classifieds System v0.12

SkyPortal Classifieds System v0.12 is vulnerable to SQL injection. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable scripts. This can allow the attacker to gain access to sensitive information stored in the database.

Mitigation:

Apply the latest security patches and ensure that all user input is properly sanitized.

Source

Exploit-DB raw data:

@~~=======================================~~@
====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG=====
@~~=======================================~~@
@~~=Author   : ByALBAYX

@~~=Website  : WWW.C4TEAM.ORG

@~~=From     : Turkish
@~~=======================================~~@
@~~=Script   :SkyPortal Classifieds System v0.12 

@~~=S.Site   :http://skyportal.net

@~~=Download :http://skyportal.net/downloads/modules/mod_classifieds_0_12.zip

@~~=Dty      :http:/skyportal.net/dl.asp?title=Classifieds%20System%20v0.12&cmd=6&cid=114

@~~=Demo     :http://vegtrafikk.net
@~~=======================================~~@

@~~=Vul:


@~~=http://c4team.org/ [PATH] /admin_classified_admin.asp

@~~=http://c4team.org/ [PATH] /admin_classified_adminsubcat.asp

@~~=http://c4team.org/ [PATH] /admin_classified_addnew.asp

@~~=http://c4team.org/ [PATH] /admin_classified_addnewsubcat.asp


@~~=Demo:

@~~=http://www.vegtrafikk.net/admin_classified_admin.asp

vs..   vs..   vs..
@~~=======================================~~@
@~~=Greetz For
  
@~~=Str0ke & Kralman & Mrabah12R & K3vin Mitnick & web-terrorist & Silent & SpotGang
@~~=======================================~~@
Derdimi dinledim, derdimden iGRENDiM...
Onun derdini gordum, derdime iMRENDiM...
FilistiN
@~~=======================================~~@

# milw0rm.com [2009-02-25]