SQli Vulnerability in iScripts VisualCaster

vendor:

iScripts VisualCaster

by:

Sid3^effects

8,8

CVSS

HIGH

SQL Injection

CWE

Product Name: iScripts VisualCaster

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Web Application

2010

SQli Vulnerability in iScripts VisualCaster

iScripts VisualCaster is a video hosting script that could be used to provide video hosting service to your customers. It is a turnkey solution to provide services like youTube. An attacker can exploit a SQL injection vulnerability in the playVideo.php script by supplying malicious input to the product_id parameter.

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.

Source

Exploit-DB raw data:

# Exploit Title:SQli Vulnerability in iScripts VisualCaster
# Version: Web Application
# vendor :www.iscripts.com/
# Date: 29 apr,2010
# Dork: Powered by iScripts VisualCaster 
# Author:Sid3^effects
# Code :
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r     
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
 
Description :
   	iScripts VisualCaster is a video hosting script that could be used to provide video hosting service to your customers. It is a turnkey solution to provide services like youTube. 


############################################################################

Xploit : SQli Vulnerability

       
 
 DEMO URL :http://www.iscripts.com/visualcaster/demo/flashPlayer/playVideo.php?product_id= [SQLi]
 


############################################################################


#Sid3^effects