[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Elite Gaming Ladders v3.0 SQL Injection Exploit

Author
Sora
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-10574
Category
web applications
Date add
03-01-2010
Platform
unsorted
===============================================
Elite Gaming Ladders v3.0 SQL Injection Exploit
===============================================

# Exploit Title: Elite Gaming Ladders v3.0 SQL Injection Exploit
# Date: January 3rd, 2010
# Author: Sora
# Version: 3.0
# Tested on: Windows and Linux
 
----------------------------------------
> Elite Gaming Ladders v3.0 SQL Injection Exploit
> Google Dork: "Fuck all script kiddies."
 
# Vulnerability Description:
Elite Gaming Ladders v3.0 suffers a remote SQL injection exploit (stats.php) in the "account" parameter.
 
# Solution:
Sanitize the database inputs or block the bad words. (UNION SELECT, UNION SELECT ALL, /*, --)
 
# Proof of Concept:
http://www.site.com/stats.php?account=627'



#  0day.today [2024-10-05]  #