| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <4D1F5B5C.3090501@gmail.com> Date: Sat, 01 Jan 2011 17:50:36 +0100 From: Andrea Purificato <andrea.purificato@...il.com> To: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk Cc: info1@...adne.it Subject: [ACM, Ariadne Content Manager] unauth. SQL injection + user enumeration Hi sec-folks, I recently discuss with Ariadne team to public disclose two new different vulnerabilities found in Ariadne Content Manager (ACM). As the name says, ACM is an enterprise solution for content management mainly used by big private and public companies and institutions. This is the site of the product: http://www.ariadnecontentmanager.com § The most critical vulnerability is an "unauthenticated SQL injection", which can be exploited by unauthenticated users injecting malicious code into the "idPhoto" parameter to the preview photo page of the product. § The next one, that is a classic user enumeration, can be performed trying to login to the main interface and exploiting the verbose messages received. Different messages will be displayed back after the login process, depending of what username was used (existing or not existing). Affected version: v4.4 and priors. Solution: upgrade ACM to the v4.5, now available. Best whises for a happy and secure new year ;) -- Andrea Purificato Ethical Hacker & Security Specialist http://www.purificato.org http://rawlab.mindcreations.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists