[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Tugux CMS (nid) BLIND sql injection vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Tugux CMS (nid) BLIND sql injection vulnerability
- From: eidelweiss@xxxxxxxxxxxxxxx
- Date: Sun, 20 Mar 2011 02:27:19 -0600
===================================================================
Tugux CMS (nid) BLIND sql injection vulnerability
===================================================================
Software: Tugux CMS
Vendor: www.tugux.com
Vuln Type: BLind SQL Injection
Download link:
http://sourceforge.net/projects/tuguxcms/files/tuguxCMS_v.1.0_final.rar/download
Author: eidelweiss
contact: eidelweiss[at]windowslive[dot]com
Home: www.eidelweiss.info
References:
http://eidelweiss-advisories.blogspot.com/2011/03/tugux-cms-nid-blind-sql-injection.html
===================================================================
exploit & p0c
[!] latest.php?nid=[valid nid]
Example p0c
[!] http://server/latest.php?nid=9 <= True
[!] http://server/latest.php?nid=-9 <= False
[+] http://server:3306 <= download the file , save and open with c++ or
wordpad will show mysql version
[!] sample: http://server:3306 result : 5.0.92-community (use versi 5.0.92) :D
====================================================================
Nothing Impossible In This World Even Nobody`s Perfect
===================================================================
==========================| -=[ E0F ]=- |==========================