DIY-CMS SQL Injection Vulnerability and Multiple HTML Injection Vulnerabilities

Bugtraq ID:	53266
Class:	Input Validation Error
CVE:	CVE-2012-6517 CVE-2012-6518 CVE-2012-6519
Remote:	Yes
Local:	No
Published:	Apr 26 2012 12:00AM
Updated:	Mar 19 2015 07:35AM
Credit:	snup
Vulnerable:	Diy-Cms Diy-Cms 1.0
Not Vulnerable:

DIY-CMS SQL Injection Vulnerability and Multiple HTML Injection Vulnerabilities

DIY-CMS is prone to an SQL injection vulnerability and multiple HTML injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

DIY-CMS 1.0 is vulnerable; other versions may also be affected.

DIY-CMS SQL Injection Vulnerability and Multiple HTML Injection Vulnerabilities

An attacker can use a browser to exploit these issues.

The following exploit URI is available

http://www.example.com/diy-cms/mod.php?mod=poll&start=[SQL-INJECTION]--

DIY-CMS SQL Injection Vulnerability and Multiple HTML Injection Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

DIY-CMS SQL Injection Vulnerability and Multiple HTML Injection Vulnerabilities

References:

• DIY-CMS vulnerability-lab reference (DIY-CMS)
  
• DIY-CMS Homepage (DIY-CMS)