Tribiq CMS index. php Remote SQL Injection Vulnerability

Release date:
Updated on:

Affected Systems:
Tribiq CMS
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51614

Tribiq CMS is a multilingual content management system.

Tribiq CMS has the SQL injection vulnerability. Successful exploitation of this vulnerability allows attackers to control applications, access or modify data, and exploit other vulnerabilities in underlying databases.

<* Source: Skote Vahshat
*>

Test method:
--------------------------------------------------------------------------------

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!

Http://www.example.com/index.php? Id = [SQLi]

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Tribiq CMS
----------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://tribiq.com/