CafeEngine CMS V2.3 SQLI Vulnerability

vendor:

CafeEngine CMS

by:

Sid3^effects aKa HaRi

7,4

CVSS

HIGH

SQL Injection

CWE

Product Name: CafeEngine CMS

Affected Version From: 2.3

Affected Version To: 2.3

Patch Exists: YES

Related CWE: CVE-2010-2245

CPE: a:cafeengine:cafeengine_cms:2.3

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows, Linux, Mac

2010

CafeEngine CMS V2.3 SQLI Vulnerability

CafeEngine CMS V2.3 is vulnerable to SQL injection. Attackers can exploit this vulnerability to gain access to the database and execute arbitrary SQL commands. This vulnerability is due to the lack of input validation in the "search.php" script. An attacker can exploit this vulnerability by sending a specially crafted HTTP request with malicious SQL statements to the vulnerable script.

Mitigation:

Upgrade to the latest version of CafeEngine CMS.

Source

Exploit-DB raw data:

==========================================================
             CafeEngine CMS V2.3 SQLI Vulnerability  
==========================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : CafeEngine CMS V2.3 SQLI Vulnerability  
Date : june, 8 2010
Vendor url :http://www.cafeengine.com/
Price: $115
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),MaYur,LiquidWorm,gunslinger_
greetz to :All ICW members.

###############################################################################################################
Description:
CafeEngine is a professional CMS for cafe or restaurant web site. It's not a set of scripts only, but allow to provide new level of service to restaurant visitors and administration.

CafeEngine Features

    * Shopping cart developed especially for restaurant sites
    * Fully customizeable
    * Photo gallery
    * Free installation
    * Google map integration
    * 24/7 email support
    * PayPal integration
    * Unlimited number of static site pages
    * Advanced site navigation
    * SEO - friendly
    * News,Events,Reviews etc...

###############################################################################################################
Xploit: SQLI

DEMO :http://server/restaurant-site-cms-script-demo/dish.php?id=[sqli]
 
###############################################################################################################
#Sid#^effects