Ulisse's Scripts 2.6.1 ladder.php SQL Injection Vulnerability

vendor:

ladder.php

by:

Sora

CVSS

CRITICAL

SQL Injection

CWE

Product Name: ladder.php

Affected Version From: 2.6.1

Affected Version To: 2.6.1

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows Vista Home Premium and Linux 2.6.28.1 (Backtrack 3)

N/A

Ulisse’s Scripts 2.6.1 ladder.php SQL Injection Vulnerability

Sora has advised that Ulisse's ladder.php file from Ulisse's Scripts 2.6.1 suffers a remote SQL injection vulnerability in the parameter 'gid'. The database inputs are not properly sanitized.

Mitigation:

Sanitize the unsanitized database inputs in the file ladder.php.

Source

Exploit-DB raw data:

# Tested on: Windows Vista Home Premium and Linux 2.6.28.1 (Backtrack 3)
------------------------------
> Ulisse's Scripts 2.6.1 ladder.php SQL Injection Vulnerability
> Author: Sora
> Contact: vhr95zw [at] hotmail [dot] com
> Website: http://greyhathackers.wordpress.com/
> Google Dork: "In your dreams, script kiddies."

# VULNERABILITY DESCRIPTION:
Type: SQL Injection
Level: 4/5 (CRITICAL)

Sora has advised that Ulisse's ladder.php file from Ulisse's Scripts 2.6.1
suffers a remote SQL injection vulnerability in the parameter 'gid'. The database inputs
are not properly sanitized.

# VULNERABILITY SOLUTION:
Sanitize the unsanitized database inputs in the file ladder.php.

# Proof of Concept: http://server/ulisse/ladder.php?gid=1'