vendor:
ezContents CMS
by:
Virangar Security Team
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: ezContents CMS
Affected Version From: 2.0.0
Affected Version To: 2.0.0
Patch Exists: Yes
Related CWE: N/A
CPE: a:ezcontents:ezcontents_cms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
ezContents CMS Version 2.0.0 SQL Injection Vulnerabilities
ezContents CMS Version 2.0.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability to gain access to sensitive information such as usernames and passwords. The vulnerable code is present in the showdetails.php and printer.php files. An attacker can exploit this vulnerability by sending a specially crafted HTTP GET request to the vulnerable files. The payloads used in the exploit are: showdetails.php: $strQuery = "SELECT * FROM ".$GLOBALS["eztbContents"]." WHERE contentname ='".$HTTP_GET_VARS["contentname"]."' AND language='".$GLOBALS["gsLanguage"]."'"; printer.php: $strQuery = "SELECT * FROM ".$GLOBALS["eztbContents"]." WHERE contentname ='".$HTTP_GET_VARS["article"]."' AND language='".$GLOBALS["gsLanguage"]."'";
Mitigation:
Upgrade to the latest version of ezContents CMS.
