iScripts easybiller 1.1 – SQL Injection - 体验盒子

作者： Sid3^effects

日期： 2010-06-06

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/13741/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

# Title:iScripts easybiller v1.1 sqli vulnerability

# Author: Sid3^effects

# Published: 2010-06-05

# price:$147

# email:shell_c99@yahoo.com

# vendor: iScripts

# url : http://www.iscripts.com/easybiller/

# google dork : Powered by iScripts EasyBiller

############################################################################

ooooo.oooooo.oooooo oooooo oooo

888' d8P'</code>Y8b<code>888.</code>888. .8'

888 888 <code>888. .8888. .8'

888 888</code>888.8'<code>888. .8'

888 888 </code>888.8'<code>888.8'

888 </code>88booo<code>888'</code>888'

o888o <code>Y8bood8P' </code>8'`8'

--------------------------------------------------------------------------------------

#####################Sid3^effects aKa HaRi##################################

#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]

#Thanks:*L0rd ÇrusAdêr*,d4rk-blu?®,R45C4L,CR4C|< 008,M4n0j,MaYuR

#ShouTZ:kedar,dec0d3r,41.w4r10r

#spl shoutz:LiquidWorm,gunslinger_ :D

#Catch us at www.andhrahackers.com or www.teamicw.in

############################################################################

Description :

iScripts EasyBiller billing software is an easy way to automate and manage your businesses. iScripts EasyBiller, combined with an integrated helpdesk delivers a powerful, easy-to-use, integrated business solution.

############################################################################

Sql injection is found in the easybiller script V1.1

Xploit :\m/sqli \m/

demo:http://[url]/easybiller/demo/viewhistorydetail.php?planid=[Sqli]

############################################################################

#Sid3^effects