19 lines
No EOL
752 B
Text
19 lines
No EOL
752 B
Text
==============================================================================
|
|
[~] Scripts Feed Business Directory SQL Injection Vulnerability
|
|
==============================================================================
|
|
[+] My home [ http://hack-tech.com ]
|
|
[+] Date Submitted: [ February 27 2010 ]
|
|
[+] Founder: [ Crux ]
|
|
[+] Vendor: [ Scriptsfeed ]
|
|
[+] Version: [ ALL ]
|
|
[+] Download: [ http://www.scriptsfeed.com/business-directory.html ]
|
|
|
|
|
|
[ EXPLOIT ]
|
|
- This vulnerability affects login.php
|
|
-The POST variables 'us' and 'ps' are vulnerable.
|
|
|
|
[ ATTACK DETAILS ]
|
|
us=user&ps=${SQLINJECTIONHERE}&s1=LOGIN
|
|
|
|
============================================================================== |