SkaLinks 1.5 (register.php) Remote Arbitrary Add Editor Vulnerability

2009.08.24

Credit: mr.al7rbi

Risk: High

Local: No

Remote: Yes

CVE: CVE-2008-7010

CWE: CWE-264

CVSS Base Score: 10/10

Impact Subscore: 10/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Complete

Integrity impact: Complete

Availability impact: Complete

# SQL Injection
#
# Found by ::: mr.al7rbi
#
# Contact ::: n16 [at] live.com
#
# my Group ::: mr.al7rbi team
Title: SkaLinks - Link Exchange Script
d0rk: 2005. Powered by SkaLinks - Link Exchange Script
DESCRIPTION:
add admin
EXPLOITS:
http://example.com/admin/register.php
example:
http://xxx.dk/partner/admin/register.php
Special Greetz for : tryag.cc/cc
Greetz : noaf_07 & aloosh & ili The General ili & fhad & all tryag members & all muslims

References:

http://xforce.iss.net/xforce/xfdb/45116

http://www.securityfocus.com/bid/31158

http://www.milw0rm.com/exploits/6445

http://packetstormsecurity.org/0809-exploits/skalinks-editor.txt

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

SkaLinks 1.5 (register.php) Remote Arbitrary Add Editor Vulnerability

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.