RunCMS Multiple Input Validation Vulnerabilities

Bugtraq ID:	27019
Class:	Input Validation Error
CVE:	CVE-2007-6546 CVE-2007-6547 CVE-2007-6548 CVE-2007-6544
Remote:	Yes
Local:	No
Published:	Dec 25 2007 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Alexandr Polyakov and Stas Svistunovich of Digital Security Research Group are credited with the discovery of these vulnerabilities.
Vulnerable:	RunCMS RunCMS 1.6
Not Vulnerable:	RunCMS RunCMS 1.6.1

RunCMS Multiple Input Validation Vulnerabilities

An attacker can exploit these issues via a browser. To exploit a cross-site scripting issue, the attacker must entice an unsuspecting victim to follow a malicious URI.

The following SQL-injection examples were provided:

http://www.example.com/[installdir]/modules/mydownloads/brokenfile.php?lid+DSecRG_INJECTION
http://www.example.com/[installdir]/modules/mydownloads/visit.php?lid=2+DSecRG_INJECTION
http://www.example.com/[installdir]/modules/mydownloads/ratefile.php?lid=2+DSecRG_INJECTION
http://www.example.com/[installdir]/modules/mylinks/ratelink.php?lid=2+DSecRG_INJECTION
http://www.example.com/[installdir]/modules/mylinks/modlink.php?lid=2+DSecRG_INJECTION
http://www.example.com/[installdir]/modules/mylinks/brokenlink.php?lid=2+DSecRG_INJECTION

Further examples may be found in the references.

• /data/vulnerabilities/exploits/27019.pl

RunCMS Multiple Input Validation Vulnerabilities

Solution:
The vendor has released RunCMS 1.6.1 to address these issues.


RunCMS RunCMS 1.6

• RunCMS RunCMS 1.6.1
  http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131

RunCMS Multiple Input Validation Vulnerabilities

References:

• RunCms Homepage (RunCms)
  
• Multiple vulnerabilities in RUNCMS 1.6 by DSecRG ( Digital Security Research Group )