[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Scripts Genie Games Site Script (index.php, id param) - SQL Injection Vulnerability
# Published : 2013-02-17
# Author :
# Previous Title : Transferable Remote v1.1 iPad iPhone - Multiple Vulnerabilities
# Next Title : RTTucson Quotations Database - Multiple Vulnerabilities


##################################################################################
       __            _                      _            ____            
      / /___ _____  (_)_____________ ______(_)__  _____ / __ _________ _
 __  / / __ `/ __ / / ___/ ___/ __ `/ ___/ / _ / ___// / / / ___/ __ `/
/ /_/ / /_/ / / / / (__  |__  ) /_/ / /  / /  __(__  )/ /_/ / /  / /_/ / 
____/__,_/_/ /_/_/____/____/__,_/_/  /_/___/____(_)____/_/   __, /  
                                                                /____/   
##################################################################################																
Games Site Script, MySQL Injection Vulnerabilities
Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=games_site_script
Product Page: http://www.hotscripts.com/listing/150-flash-game-script-comes-with-150-games/
Script Demo: http://scriptsgenie.com/demo/GameScript150Games/

Author(Pentester): 3spi0n
On Social: Twitter.Com/eyyamgudeer
Greetz: Grayhats Inc. and Janissaries Platform.
##################################################################################

[~] MySQL Injection on Demo Site (/index.php?act=play&id=)

>>> http://server/index.php?act=play&id=122' (MySQLi Found)