PacerCMS 'id' Parameter Multiple SQL Injection Vulnerabilities

Bugtraq ID:	27397
Class:	Input Validation Error
CVE:	CVE-2008-0451
Remote:	Yes
Local:	No
Published:	Jan 22 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	db at RawSecurity.org is credited with the discovery of these vulnerabilities.
Vulnerable:	PacerCMS PacerCMS 0.6
Not Vulnerable:	PacerCMS PacerCMS 0.6.1

PacerCMS 'id' Parameter Multiple SQL Injection Vulnerabilities

PacerCMS is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

These issues affect versions prior to PacerCMS 0.6.1.

NOTE: To exploit these issues, the attacker may require 'staff member' access.

PacerCMS 'id' Parameter Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following proof-of-concept URI is available:

http://www.example.com/pacercms/siteadmin/article-edit.php?id=[SQL]

PacerCMS 'id' Parameter Multiple SQL Injection Vulnerabilities

Solution:
Users can upgrade to PacerCMS 0.6.1 to address these issues. Please see the references for more information.


PacerCMS PacerCMS 0.6

• PacerCMS pacercms0.6.1.zip
  http://prdownloads.sourceforge.net/pacercms/pacercms0.6.1.zip

PacerCMS 'id' Parameter Multiple SQL Injection Vulnerabilities

References:

• PacerCMS 0.6.1 streamlines code base, addresses security issue (PacerCMS)
  
• PacerCMS Home Page (PacerCMS)
  
• PacerCMS Multiple Vulnerabilities (XSS/SQL) ([email protected])