[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Dede CMS blind SQL Injection Vulnerability

Author
H-SK33PY
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-14128
Category
web applications
Date add
20-09-2010
Platform
php
==========================================
Dede CMS blind SQL Injection Vulnerability
==========================================

   010101010101010101010101010101010101010101010101010101010    
   0                                                       0
   1        Iranian Datacoders Security Team 2010          1
   0                                                       0
   010101010101010101010101010101010101010101010101010101010


# Exploit Title: Dede CMS SQL Injection Vulnerability
# Date: 18/09/2010                             
# Author: H-SK33PY                      
# Software Link: http://www.dedecms.com/
# Version: V56_GBK
# Google dork :  inurl:*.php?id= & intext:Powered by DedeCMS V56_GBK
# Platform / Tested on: linux
# Category: webapplications
# Code : [SQLi]


#BUG:#########################################################################

run SQL Injection method in all of this dork ;) 


example : 

http://[PATH]/story.php?ID=1[SQL injection]


Live demo : 

http://efujin.net/book/story.php?id=1[SQL injection]


Good Luck 

#############################################################################
Our Website : http://www.datacoders.ir/

Contact me : h-skeepy@att.net

Special Thanks to : Immortal Boy & Sp|R|T & BigB4NG & mehrdadab7 & hosinn & r00t & 3r1ck & The.3zar &  NIK  

                                        All Iranian DataCoders Members

Greetz to : All HackerzHub.com Members   

#############################################################################



#  0day.today [2024-09-20]  #