PT-2015-5281 · Sefrengo · Sefrengo

Nguyen Hung Tuan · Published 2015-02-03 · Updated 2018-10-09 · CVE-2015-1428

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sefrengo versions prior to 1.6.2

Description The issue allows remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to "backend/main.php" or remote authenticated users to execute arbitrary SQL commands via the value id parameter in a "save value" action to "backend/main.php".

Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the "backend/main.php" endpoint and validating user input for the value id parameter and sefrengo cookie to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2015-1428

Affected Products

Sefrengo

References · 7

• 🔥 https://exploit-db.com/exploits/35972 · Exploit
• 🔥 http://exploit-db.com/exploits/35972 · Exploit
• 🔥 http://itas.vn/news/itas-team-found-out-multiple-sql-injection-vulnerabilities-in-sefrengo-cms-v1-6-1-74.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-1428 · Security Note
• https://github.com/sefrengo-cms/sefrengo-1.x/commit/0b1edd4b22a47743eff7cfaf884ba2a4e06e15eb · Note
• https://github.com/sefrengo-cms/sefrengo-1.x/commit/22c0d16bfd715631ed317cc990785ccede478f07 · Note
• http://securityfocus.com/archive/1/534593/100/0/threaded · Note