VisualShapers ezContents Authentication Bypass and Multiple SQL Injection Vulnerabilities

Bugtraq ID:	37858
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2010 12:00AM
Updated:	Jan 19 2010 12:00AM
Credit:	AmnPardaz Security Research Team
Vulnerable:	VisualShapers ezContents 2.0.3 VisualShapers ezContents 2.0.2 VisualShapers ezContents 2.0.1 VisualShapers ezContents 2.0 rc3 VisualShapers ezContents 2.0 rc2 VisualShapers ezContents 2.0 rc1 VisualShapers ezContents 2.0 VisualShapers ezContents 1.45 b VisualShapers ezContents 1.44 VisualShapers ezContents 1.43 VisualShapers ezContents 1.42 VisualShapers ezContents 1.41 VisualShapers ezContents 1.40 VisualShapers ezContents 1.4.5 VisualShapers ezContents 0
Not Vulnerable:

VisualShapers ezContents Authentication Bypass and Multiple SQL Injection Vulnerabilities

VisualShapers ezContents is prone to an authentication-bypass vulnerability and multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

ezContents 2.0.3 is vulnerable; other versions may also be affected.

VisualShapers ezContents Authentication Bypass and Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example data is available:

login page: admin' AND IF(@Condition,BENCHMARK(1000000, md5(10)),2) OR '1'='1