Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability

–Security Report–
Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability

Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI

Date: 23/02/06 08:36 PM

Contacts:{
ICQ: 10072
MSN/Email: [email protected]
Web: http://www.nukedx.com
}

Vendor: Cilem (www.cilem.net)
Version: 1.1 and prior versions must be affected.
About: Via this method remote attacker can inject arbitrary SQL query.
Level: Critical

How&Example:
Not available at this time.

Timeline:

• 23/02/2006: Vulnerability found.
• 23/02/2006: Contacted with vendor and waiting reply.
  –
  Exploit: Not available at this time.