# Eggblog < 3.07 Remote (SQL Injection / Privilege Escalation) Exploit

    Welcome to Eggblog 2.x Remote Privilege Escalation
    This exploit has been coded by nukedx
    You can found original advisory on http://www.nukedx.com/?viewdoc=36
    Dork for this exploit: inurl:"powered by eggblog"
    Your target must be like that: www.victim.com/Path/
    The sites you found with given dork has like: www.victim.com/eggblog/home/ or www.victim.com/home/
    If the site has /eggblog/home in link your target must be www.victim.com/eggblog/
    For second example your target must be www.victim.com/
    You can login with your admin account via www.victim.com/eggblog/admin/index.php
    Have phun

    Target ->

# milw0rm.com [2006-05-28]