Elxis CMS 'index.php' Multiple SQL Injection Vulnerabilities

Bugtraq ID:	45126
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 30 2010 12:00AM
Updated:	Mar 19 2015 08:27AM
Credit:	High-Tech Bridge SA - Ethical Hacking & Penetration Testing (http://www.htbridge.ch/)
Vulnerable:	Elxis Elxis CMS 2009.2
Not Vulnerable:	Elxis Elxis CMS 2009.3

Elxis CMS 'index.php' Multiple SQL Injection Vulnerabilities

Elxis CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Elxis CMS 2009.2 is affected; other versions may also be vulnerable.

Elxis CMS 'index.php' Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example cookie and request are available:

usercookie[username]=username; usercookie[password]=123'SQL_CODE_HERE

POST /index.php?option=com_poll&Itemid=17 HTTP/1.1
X_FORWARDED_FOR: 123'SQL_CODE_HERE
Content-Type: application/x-www-form-urlencoded
Content-Length: 66

Elxis CMS 'index.php' Multiple SQL Injection Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Elxis CMS 'index.php' Multiple SQL Injection Vulnerabilities

References:

• Elxis CMS ()
  
• Elxis CMS Homepage (Elxis )
  
• High-Tech Bridge ()