Document Title:
===============
Maxdome Website - SQL Injection Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=300
Release Date:
=============
2011-10-26
Vulnerability Laboratory ID (VL-ID):
====================================
300
Product & Service Introduction:
===============================
maxdome ist das Video-on-Demand-Angebot der ProSiebenSat.1 Media. Das Pay-per-View-Angebot ist das größte und
am meisten genutzte im europäischen Raum. Erhältlich sind aktuelle Filme und Serien, oftmals sogar vor der
eigentlichen TV-Ausstrahlung im Free- oder Pay-TV sowie eine Vielzahl an Comedy-Inhalten, Dokumentationen,
Sport- und Musikvideos.
(Copy of the Vendor Homepage: http://www.maxdome.com)
Abstract Advisory Information:
==============================
Vulnerability-Lab researcher discovered a remote SQL Injection vulnerability on the famous Maxdome`s Portal (videothek) website.
Vulnerability Disclosure Timeline:
==================================
2010-12-14: Vendor Notification
2011-05-07: Vendor Response/Feedback
2011-09-03: Vendor Fix/Patch -> CHECK BY US!
2011-10-26: Public or Non-Public Disclosure
Discovery Status:
=================
Published
Exploitation Technique:
=======================
Remote
Severity Level:
===============
Critical
Technical Details & Description:
================================
A remote SQL Injection vulnerability is detected on MaxDomes Videothek Portal website. The vulnerability allows an remote attacker
to inject own sql commands over the weak id param request.
Vulnerable Module(s):
[+] Home Flash Video Componente
Picture(s):
../sql1.png
Proof of Concept (PoC):
=======================
The sql injection vulnerability can be exploited by remote attackers. For demonstration or reproduce ...
Path: /php-bin/functions/home_flash/
File: homeflash.swf
Para: ?id=
MaxDome - Remote SQL Injection PoC
Version