vendor:
Pina CMS
by:
Shadman Tanjim
8,8
CVSS
HIGH
SQL Injection and XSS
89, 79
CWE
Product Name: Pina CMS
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows/Linux
2014
Pina CMS SQL Injection and XSS Vulnerabilities
The vulnerability exists due to insufficient filtration of user-supplied input in 'blog_id' and 'search' parameters in 'page.php' script. A remote attacker can send a specially crafted request to the vulnerable script and execute arbitrary SQL commands in application's database. Also, an attacker can inject arbitrary web script or HTML in application's 'search' parameter. Successful exploitation of this vulnerability may allow an attacker to steal cookie-based authentication credentials, modify data, deface web site, perform phishing attacks and launch other attacks.
Mitigation:
Input validation should be used to prevent SQL injection attacks. Also, the application should properly sanitize user-supplied input before using it in the generated web page.
