REDPEACH CMS - SQL Injection Vulnerability

vendor:

REDPEACH CMS

by:

Lidloses_Auge

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: REDPEACH CMS

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

REDPEACH CMS – SQL Injection Vulnerability

The Files 'index.php' and 'page.php' contain vulnerable SQL Querys at the GET Parameter 'zv'. In the most cases, a table prefix is needed, which is similar to the websites' name, followed by '_user'. The important column names are 'username' and 'password'. The number of columns is 8 almost everytime.

Mitigation:

Input validation and sanitization should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

###############################################################
#
#           REDPEACH CMS - SQL Injection Vulnerability     
#	    http://www.redpeach.de/
#                                                             
#      Vulnerability discovered by: Lidloses_Auge             
#      Greetz to:                   -=Player=- , Suicide, g4ms3, enco,
#                                   Palme, GPM, karamble, Free-Hack
#      Date:                        23.12.2008
#
###############################################################
#                                                             
#      Admin Panel: [Target]/admin/login.php
#      Description: The Files "index.php" and "page.php" contain
#		    vulnerable SQL Querys at the GET Parameter "zv".
#		    In the most cases you need a table prefix, which
#		    is similar to the websites' name, so you can guess.
#		    After table prefix there's "_user".
#		    The important column names are "username" and "password".
#		    The number of columns is 8 almost everytime.
#
#      Example:     http://www.website.com/page.php?pageid=1&zv=null+union+select+concat(username,0x3a,password),2,3,4,5,6,7,8+from+website_user+limit+0,1/*
#                                                             
###############################################################

# milw0rm.com [2008-12-22]