OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Full-disclosure] Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability

nukedxnukedx.com
Date: Fri Feb 24 2006 - 10:16:48 CST

--Security Report--
Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability
---
Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI
---
Date: 23/02/06 08:36 PM
---
Contacts:{
ICQ: 10072
MSN/Email: nukedxnukedx.com
Web: http://www.nukedx.com
}
---
Vendor: Cilem (www.cilem.net)
Version: 1.1 and prior versions must be affected.
About: Via this method remote attacker can inject arbitrary SQL query.
Level: Critical
---
How&Example:
Not available at this time.
--
Timeline:
* 23/02/2006: Vulnerability found.
* 23/02/2006: Contacted with vendor and waiting reply.
--
Exploit: Not available at this time.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/