Invision Gallery SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Invision Gallery SQL Injection Vulnerability
# Published : 2013-01-17
# Author :
# Previous Title : Adult Webmaster Script Password Disclosure Vulnerability
# Next Title : phlyLabs phlyMail Lite 4.03.04 Path Disclosure and Stored XSS Vulnerabilities

##############
# Exploit Title : Invision Gallery SQL Injection
#
# Exploit Author : Ashiyane Digital Security Team
#
# software Homepage: www.invisionpower.com/apps/gallery/
#
# Home : ww.Ashiyane.org
#
# Security Risk : High - SQL Injection
#
# version : 2.0.5
#
# Dork : Invision Gallery 2.0.5 ? 2013  IPS, Inc.   inurl:img=  or Invision Gallery 2.0.5  IPS, Inc.   inurl:img=
#
##############
#location: site/index.php?automodule=gallery&cmd=si&img=[SQL]
#  or site/act=module&module=gallery&cmd=si&img=[SQL]  
#
##############
# [Inject with Havij or inject manually]
##############
#Greetz to: My Lord ALLAH
##############
#
#Amirh03in
#
##############