bugtraq - Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 24 Feb 2006 18:16:48 +0200
From: nukedx@...edx.com
To: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com,
	bilgi@...em.net
Subject: Advisory: CilemNews System <= 1.1 Remote SQL Injection
	Vulnerability


--Security Report--
Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability
---
Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI
---
Date: 23/02/06 08:36 PM
---
Contacts:{
ICQ: 10072
MSN/Email: nukedx@...edx.com
Web: http://www.nukedx.com
}
---
Vendor: Cilem (www.cilem.net)
Version: 1.1 and prior versions must be affected.
About: Via this method remote attacker can inject arbitrary SQL query.
Level: Critical
---
How&Example:
Not available at this time.
--
Timeline:
* 23/02/2006: Vulnerability found.
* 23/02/2006: Contacted with vendor and waiting reply.
--
Exploit: Not available at this time.