23 lines
No EOL
868 B
Text
23 lines
No EOL
868 B
Text
=========================================================
|
|
Free Advertisment cms (user_info.php) SQL Injection Vulnerability
|
|
=========================================================
|
|
##########################################
|
|
# Name: Free Advertisment cms (user_info.php) SQL Injection Vulnerability
|
|
# Date: 2010-05-11
|
|
# vendor: http://www.laserayaneh.com
|
|
# Author: Ashiyane Digital Security Team
|
|
# Thanks to: khodam :P, Satanic2000,Veron, ... And All Ashiyane Members ...
|
|
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
|
|
# Home: www.Ashiyane.org
|
|
##########################################
|
|
|
|
[+] Dork: " inurl: user_info.php?user_id= " Or " inurl: index.php?catid= "
|
|
|
|
|
|
[+] Vulnerability:
|
|
|
|
www.site.com/[path]/user_info.php?user_id=[SQLi]
|
|
www.site.com/[path]/index.php?catid=[SQLi]
|
|
|
|
|
|
########################################## |