AV Arcade Free Edition – ‘add_rating.php?id’ Blind SQL Injection

• Exploit Database
• 10 阅读

• 作者： DaOne
  日期： 2012-09-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/21007/

• ##########################################
  [~] Exploit Title: AV Arcade Free Edition Blind SQL Injection
  [~] Date: 31/08/2012
  [~] Author: DaOne (@LibyanCA)
  [~] Software Link: http://www.avscripts.net/avarcade/freearcadescript/
  [~] Google Dork: intext:Powered by AV Arcade Free Edition"
  ##########################################
  
  # Exploit-DB Note: Must be logged in.
  
  [#] [ Exploit ]
  
  http://localhost/content/add_rating.php?id=[Blind SQL Injection]
  
  
  ##########################################
  [*] thanks to : All LibyanCA Members (^_^)
  ##########################################