Soltech CMS 0.4 SQL Injection

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1044614 漏洞类型
发布时间 2013-08-15 更新时间 2013-08-15
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2013080118
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Hello list!

There is SQL Injection vulnerability in Soltech.CMS. This is commercial CMS.

-------------------------
Affected products:
-------------------------

Vulnerable are Soltech.CMS v 0.4 and previous versions.

-------------------------
Affected vendors:
-------------------------

Soltech
http://soltech.com.ua

----------
Details:
----------

SQL Injection (WASC-19):

http://site/index.php?level_path=%27%20or%20version()=5%23

------------
Timeline:
------------ 

2013.06.05 - announced at my site.
2013.06.07 - informed developers about the first part of vulnerabilities.
2013.07.14 - informed developers about the second part of vulnerabilities.
2013.08.13 - disclosed at my site (http://websecurity.com.ua/6550/).

Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua