Readymade Video Sharing Script 3.2 SQL Injection

Readymade Video Sharing Script version 3.2 suffers from a remote SQL injection vulnerability.


MD5 | 96e4101c34b5a78fd5ca983e71cf78b8

##################################################################
# Exploit Title: Readymade Video Sharing Script - SQL Injection (Error Based)
# Google Dork: NA
# Date: 10.02.2018
# Exploit Author: Varun Bagaria
# Vendor Homepage: https://www.phpscriptsmall.com/
# Software Link: https://www.phpscriptsmall.com/product/php-video-sharing-script/
# Version: 3.2
# Tested on: Windows 7
# Category: Webapps
# CVE : NA
##################################################################

Proof of Concept
=================

Attack Parameter : search
Payload : '

Reproduction Steps:
------------------------------
1. Access the website
2. In the search bar insert ' and you will get error based SQL Injection



Related Posts