Lucene search

K
exploitpack3spi0nEXPLOITPACK:6CE519F07286800B0AEF987F53BF3A8D
HistoryFeb 17, 2013 - 12:00 a.m.

Scripts Genie Top Sites - out.php?id SQL Injection

2013-02-1700:00:00
3spi0n
1743

Scripts Genie Top Sites - out.php?id SQL Injection

##################################################################################
       __            _                      _            ____            
      / /___ _____  (_)_____________ ______(_)__  _____ / __ \_________ _
 __  / / __ `/ __ \/ / ___/ ___/ __ `/ ___/ / _ \/ ___// / / / ___/ __ `/
/ /_/ / /_/ / / / / (__  |__  ) /_/ / /  / /  __(__  )/ /_/ / /  / /_/ / 
\____/\__,_/_/ /_/_/____/____/\__,_/_/  /_/\___/____(_)____/_/   \__, /  
                                                                /____/   
##################################################################################																
Top Sites Script, SQL Injection Vulnerabilities
Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=top_site_script
Product Page: http://www.hotscripts.com/listing/top-sites-2-2-1/
Script Demo: http://scriptsgenie.com/demo/toplist.2.11/toplist/index.php

Author(Pentester): 3spi0n
On Social: Twitter.Com/eyyamgudeer
Greetz: Grayhats Inc. and Janissaries Platform.
##################################################################################

[~] MySQL Injection on Demo Site (/out.php?id=)

>>> http://server/toplist/out.php?id=20' (MySQLi Found)