Itech News Portal Script 6.28 – ‘sc’ SQL Injection

Exploit Database
109 阅读

作者： Ihsan Sencan

日期： 2017-02-02
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/41228/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

# # # # #

# Exploit Title: Itech News Portal Script v6.28 - 'sc' Parameter SQL Injection

# Google Dork: N/A

# Date: 02.02.2017

# Vendor Homepage: http://itechscripts.com/

# Software Buy: http://itechscripts.com/news-portal-script/

# Demo: http://news-portal.itechscripts.com/

# Version: 6.28

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail : ihsan[beygir]ihsan[nokta]net

# # # # #

# SQL Injection/Exploit :

# http://localhost/[PATH]/subcategory.php?sc=[SQL]

# E.t.c.

# # # # #