Tugux CMS (nid) BLIND sql injection vulnerability

vendor:

Tugux CMS

by:

eidelweiss

7.5

CVSS

HIGH

BLind SQL Injection

CWE

Product Name: Tugux CMS

Affected Version From: Unknown

Affected Version To: Unknown

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

2011

Tugux CMS (nid) BLIND sql injection vulnerability

The Tugux CMS is vulnerable to blind SQL injection. An attacker can exploit this vulnerability by injecting malicious SQL queries through the 'nid' parameter in the 'latest.php' page. The vulnerability can be confirmed by using the provided proof of concept (p0c) examples. Additionally, the vulnerability can also be used to obtain the MySQL version running on the server by accessing the server on port 3306.

Mitigation:

The vendor has not provided a patch for this vulnerability. However, to mitigate the risk, users are advised to restrict access to the 'latest.php' page and ensure that user input is properly validated and sanitized.

Source

Exploit-DB raw data:

===================================================================
    Tugux CMS (nid) BLIND sql injection vulnerability
===================================================================
 
Software:   Tugux CMS
Vendor:     www.tugux.com
Vuln Type:  BLind SQL Injection
Download link:  http://sourceforge.net/projects/tuguxcms/files/tuguxCMS_v.1.0_final.rar/download
Author:     eidelweiss
contact:    eidelweiss[at]windowslive[dot]com
Home:       www.eidelweiss.info
 
 
References: http://eidelweiss-advisories.blogspot.com/2011/03/tugux-cms-nid-blind-sql-injection.html
 
 
===================================================================
 
    exploit & p0c
 
[!] latest.php?nid=[valid nid]
 
    Example p0c
 
[!] http://server/latest.php?nid=9    <= True
[!] http://server/latest.php?nid=-9   <= False
 
[+] http://server:3306    <= download the file , save and open with c++ or wordpad will show mysql version
 
[!] sample: http://server:3306 result : 5.0.92-community (use versi 5.0.92) :D
 
 
====================================================================
 
    Nothing Impossible In This World Even Nobody`s Perfect
 
===================================================================
 
==========================| -=[ E0F ]=- |==========================