Trang chủ » Hacking and Security » SQL Injection » TUTORIALS » vBulletin » (Final 2.1) Hệ thống RPG PET

19 thg 4, 2013

(Final 2.1) Hệ thống RPG PET

# # # # # # # # # # # # # # # # # # # # # # # # # # # # ## ## #
# Exploit Title: (Final 2.1) Hệ thống RPG PET #
# Google Dork: n/a #
# Date: 15/4/13 #
# Exploit Author: VnDragon - VHB #
# Code Mod: http://www.vietvbb.vn/up/showthread.php?t=40921 #
# Version: [2.1] #
# Thank concobe #
# # # # # # # # # # # # # # # # # # # # # # # # # # # # ## ## #
Exploit: http://victim.com/rpg.php?do=battle&type=monster&id=-1' [SQL]
File: battle.php, Line: 11 and more fille.
Code:

PHP Code:
$idmon = $_GET['id']; 
Fix

Find
PHP Code:
$idmon = $_GET['id']; 
And Replace

PHP Code:
$idmon = addslashes($_GET['id']); 


Demo: http://nguyenmy.net/forum/rpg.php?do...=monster&id=-1'
Nhãn: , , ,

Không có nhận xét nào:

Đăng nhận xét