Search | WebPortal | Contact Us
Recent News

You can use the form below to search our site. Just enter the keywords to search.

Invision Power Top Site List SQL Injection
December 15, 2021

Invision Power Top Site List is a flexible site ranking script written in PHP, the popular programming choice for web developers. Featuring an impressive feature set with a user-friendly interface.

Invision Power Top Site List is vulnerable to an SQL injection vuln due to not properly sanitizing user input via the "offset" parameter. However, it may be very difficult to exploit this vuln. Compromise.

The following GET request will trigger the SQL query syntax error ..

Error: Error executing query
The software returned the following error:
You have an error in your SQL syntax near '[ Problem Here ],20' at line 14
Query Executed: SELECT s.*,COUNT(DISTINCT as comment_count, AVG(v.value) 
as rating,COUNT(DISTINCT as num_votes,COUNT(DISTINCT as already_voted 
FROM tsl_sites AS s, tsl_users AS u, tsl_emails AS e LEFT JOIN tsl_categories AS 
cat ON = s.category LEFT JOIN tsl_votes AS v ON = LEFT JOIN 
tsl_ip_address AS ipa ON ipa.address = "" LEFT JOIN tsl_ip_records 
AS ipr ON = ipa.record LEFT JOIN tsl_votes AS me ON = && me.ip_record = LEFT JOIN tsl_comments AS c ON = && 
c.admin_validate = 1 WHERE s.user = && = && u.blocked = 0 && = 1 && s.admin_validate = 1 && e.validated = 1 GROUP BY ORDER BY 
out_count DESC, rating DESC, in_count DESC, name DESC LIMIT [ Problem Here ],20

The Invision Team was very prompt and professional in getting back to me about this. Because of the difficulty of exploitation there will be no patch or immediate upgrade released. However the issue will be addressed in the next release of Invision Top Sites List.

James Bercegay of the GulfTech Security Research Team.

Copyright 2004 GulfTech Research And Development, All Rights Reserved