F3 Design SQL Injection

2016.12.25

One Security (AZ)

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl:.php?id= intext:"Site Hand Crafted by F3 Designs"

//////////////////
#@!#$#@O N E - S E C U R I T Y@$$%#|
//////////////////
#Exploit Title: F3 Design SQL Injection
#Exploit Dork: inurl:.php?id= intext:"Site Hand Crafted by F3 Designs"
#Exploit Author: One Security
#Powered By: Equ1n0x
//////////////////
#Demo:
///////////////////
# countryfest.ca/page.php?id=72
# www.rykiss.com/page.php?id=173
# www.mydotca.ca/go.php?id=415
//////////////////
Greatz:OneSecurity Army
//////////////////

References:

http://www.one-security.org/

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

F3 Design SQL Injection

Dork: inurl:.php?id= intext:"Site Hand Crafted by F3 Designs"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.