WordPress Plugin Events – SQL Injection

• Exploit Database
• 125 阅读

• 作者： Red-D3v1L
  日期： 2010-01-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/10929/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

  +===================================================================================+ ./SEC-R1Z _ __ __ _ _ ___ _ _ _ _ ___ _ _ _ _ / /_ _ _ _ / _ _\/ _ _ /\\< |/_ _ _ _ / \ \_ _ _ _//___ // __||) / || / / \_ _ _ _//___ //| __ ||/||/ / _______\\_ _ \\2_0_0_9 |\|| / /____ /_ _ _ _ _\ _ _ _/\ _ _ _ /|__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!! +===================================================================================+   [?] ~ Note : sEc-r1z CrEw# r0x ! ============================================================================== [?] WordPress script <== x.x.x (Events Plugins)SQL Injection Vulnerability ============================================================================== [?] My home:[ http://sec-r1z.com ] [?] Script: [ WordPress Script All Versi0n ] [?] Language: [ PHP ] [?] Vendor[http://wordpress.org/extend/plugins/events-calendar/ ] [?] Founder:[ ./Red-D3v1L ] [?] Gr44tz to:[ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ] [?] Fuck To : [ Zombie_KsA << big big big L4m3r ] ########################################################################   ===[ Exploit SQL ]===   [»]SQL : http://server/[Plugins]/?event_id=[inj3ct C0dE]   ==============================================================================   #sEc-r1z.com Str1kEz y0u !