UCStats v1.1 SQL Injection Vulnerability

2010-01-01T00:00:00
ID 1337DAY-ID-10559
Type zdt
Reporter Sora
Modified 2010-01-01T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ========================================
UCStats v1.1 SQL Injection Vulnerability
========================================

> UCStats 1.1 Remote SQL Injection Vulnerability
> Author: Sora
> Google Dork: "Powered by UCStats version 1.1"
 
# Vulnerability Description:
UCStats version 1.1 suffers a remote SQL injection vulnerability in stats.php.
 
# Code/Proof of Concept (PoC):
http://server/stats.php?game=cstrike&q=players&page=4'&sort=online&dir=asc



#  0day.today [2018-03-28]  #