Starting Page 1.3 - 'category' SQL Injection

Exploit Title: Starting Page 1.3 "Add a Link" - SQL Injection Date: 11-01-2017 Software Link: http://software.friendsinwar.com/downloads.php?catid=2&downloadid=11 Exploit Author: Ben Lee Contact: [email protected] Category: webapps Tested on: Win7 1. Description The vulnerable file is...

addalink <= 4 (category_id) Remote SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link = 4 - beta || Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Add a link / Version: = 4 - beta / File affected: userreadlinks.php ...

addalink 4 - category_id SQL Injection

addalink 4 - categoryid SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DE...

addalink-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DESC LIMIT $start,$steps"; 33:...

addalink <= 4 (category_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== addalink $datadescription"; 91: -------------- The var $categoryid isn't verified. Proof of Concept: http://host/addalink-path/userreadlinks.php?categoryid=' UNION SELECT...

addalink 4 - &#039;category_id&#039; SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DESC LIMIT $start,$steps"; 33:...

Add a link 4 - Security Bypass / SQL Injection

source: https://www.securityfocus.com/bid/31228/info Add a link is prone to multiple security vulnerabilities, including multiple security-bypass issues and an SQL-injection issue. Exploiting the security-bypass issues may allow an attacker to bypass certain security restrictions and perform...

Add a link 4 - Security Bypass SQL Injection

Add a link 4 - Security Bypass SQL Injection source: https://www.securityfocus.com/bid/31228/info Add a link is prone to multiple security vulnerabilities, including multiple security-bypass issues and an SQL-injection issue. Exploiting the security-bypass issues may allow an attacker to bypass...