Exploit CoolForum 0.5/0.7/0.8 - 'register.php?login' SQL Injection

Exploiter

Хакер
34,599
0
18 Дек 2022
EDB-ID
25240
Проверка EDB
  1. Пройдено
Автор
ROMANO
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2005-0858
Дата публикации
2005-03-19
Код:
source: https://www.securityfocus.com/bid/12852/info
 
Multiple remote input validation vulnerabilities affect CoolForum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality.
 
Multiple SQL injection vulnerabilities have been reported and a cross-site scripting vulnerability is also reported.
 
An attacker may leverage these issues to manipulate and view arbitrary database contents by exploiting the SQL injection issues, and to have arbitrary script code executed in the browser of an unsuspecting user by exploiting the cross-site scripting vulnerabilities. 

http://www.example.com/register.php?action=confirm&login='or 1=1 into outfile '/var/www/html/cf_users_with_magic_quotes_on.txt
 
Источник
www.exploit-db.com

Похожие темы