lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date: Sat, 01 Jan 2011 17:50:36 +0100
From: Andrea Purificato <andrea.purificato@...il.com>
To: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Cc: info1@...adne.it
Subject: [ACM, Ariadne Content Manager] unauth. SQL injection + user enumeration

Hi sec-folks,

I recently discuss with Ariadne team to public disclose two new
different vulnerabilities found in Ariadne Content Manager (ACM).

As the name says, ACM is an enterprise solution for content management
mainly used by big private and public companies and institutions.

This is the site of the product: http://www.ariadnecontentmanager.com


§ The most critical vulnerability is an "unauthenticated SQL injection",
which can be exploited by unauthenticated users injecting malicious code
into the "idPhoto" parameter to the preview photo page of the product.


§ The next one, that is a classic user enumeration, can be performed
trying to login to the main interface and exploiting the verbose
messages received.
Different messages will be displayed back after the login process,
depending of what username was used (existing or not existing).


Affected version: v4.4 and priors.

Solution: upgrade ACM to the v4.5, now available.


Best whises for a happy and secure new year ;)
-- 
Andrea Purificato
Ethical Hacker & Security Specialist
http://www.purificato.org
http://rawlab.mindcreations.com

Powered by blists - more mailing lists