Scripts Feed Business Directory – SQL Injection

• Exploit Database
• 12 阅读

• 作者： Crux
  日期： 2010-02-27
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11592/

• ==============================================================================
  [~] Scripts Feed Business Directory SQL Injection Vulnerability
  ==============================================================================
  [+] My home[ http://hack-tech.com ]
  [+] Date Submitted:[ February 27 2010 ]
  [+] Founder: [ Crux ]
  [+] Vendor:[ Scriptsfeed ]
  [+] Version: [ ALL ]
  [+] Download:[ http://www.scriptsfeed.com/business-directory.html ]
  
  
  [ EXPLOIT ]
  - This vulnerability affects login.php
  -The POST variables 'us' and 'ps' are vulnerable.
  
  [ ATTACK DETAILS ]
  us=user&ps=${SQLINJECTIONHERE}&s1=LOGIN
  
  ==============================================================================