ReciPHP 'id' parameter SQL Injection Vulnerability

Release date:
Updated on:

Affected Systems:
Sourceforge recphp 1.1
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56531

ReciPHP is an open-source recipe CMS script.

ReciPHP 1.1 and other versions have the SQL injection vulnerability. After successful exploitation, attackers can control applications, access or modify data, and exploit other vulnerabilities in lower-level databases.

<* Source: cr4wl3r
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Http://www.example.com/index.php? Content = showrecipe & amp; id =-3 union select version (), 2, 3, 4, 5 --

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Sourceforge
-----------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://mod-security.svn.sourceforge.net