Changomedia SQL Injection

2012.06.12

Credit: TAURUS OMAR

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Dork: intext:\"Pwrd:Changomedia\" OR intext: Changomedia diseño & hosting

==> ABOUT ME:
--- TAURUS OMAR
--- INDEPENDENT SECURITY RESEARCHER
--- ACCESOILEGAL.BLOGSPOT.COM
--- @omartaurus
--- omar-taurus[at]dragonsecurity[dot]org
--- omar-taurus[at]live[dot]com
===> INFO:
Author : TAURUS OMAR
Category : Webapps / 0day
Title Exploit : Changomedia - SQL Injection Vulnerability
Vendor : Changomedia
URL Vendor : http://changomedia.com.ar/
Google Dork : intext:"Pwrd:Changomedia" Or intext: Changomedia dise&#241;o & hosting
==> SAMPLE'S SQLi:
http://www.quxxcrossx.com/paginas.php?ID=148 [SQL Injection]
http://ynfinity.xxm.ar/paginas.php?ID=25 [SQL Injection]
http://www.hxxldelaciudad.com/paginas.php?ID=6 [SQL Injection]
http://www.juruxxxaja.com.ar/paginas.php?ID=7 [SQL Injection]
http://www.envaxxxoraservpack.com.ar/paginas.php?ID=24 [SQL Injection]
MORE IN GOOGLE..

References:

http://changomedia.com.ar/

Vote for this issue:

50%

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}