FlexCMS Login Cookie SQL Injection

high Nessus Plugin ID 40824

Synopsis

The remote web server contains a PHP script that is prone to a SQL injection attack.

Description

The remote host is running FlexCMS, a content management system written in PHP. The version of the FlexCMS installed on the remote host fails to sanitize input passed to the login cookie 'FCLoginData12345' before using it in database queries. Provided PHP's 'magic_quotes_gpc' setting is disabled, an attacker may be able to exploit this issue to manipulate database queries, leading to disclosure of sensitive information, modification of data, or attacks against the underlying database.

Solution

Unknown at this time.

See Also

https://packetstormsecurity.com/0908-exploits/flexcms25-sql.txt

Plugin Details

Severity: High

ID: 40824

File Name: flexcms_login_cookie_sql_injection.nasl

Version: 1.12

Type: remote

Family: CGI abuses

Published: 8/31/2009

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Exploited by Nessus: true

Vulnerability Publication Date: 8/28/2009

Reference Information

BID: 36179

SECUNIA: 36513, 36528