23 lines
No EOL
652 B
Text
23 lines
No EOL
652 B
Text
# Exploit Title: City Directory Review and Rating Script SQL Injection
|
|
Vulnerability
|
|
# Date: 22.12.2012
|
|
# Author: 3spi0n
|
|
# Script Vendor or Software Link:
|
|
http://b-scripts.com/en/18-city-reviewer-yelp-clone.html
|
|
# Category: WebApps
|
|
# Type: SQL Injection [MySQLi]
|
|
# Tested On: Ubuntu 12.10 - Win7
|
|
|
|
=================================================
|
|
# Demo: http://b-scripts.com/demo/city_reviewer/
|
|
|
|
# MySQLi Detected On:
|
|
http://server/city_reviewer/search.php?category=6
|
|
|
|
|
|
=================================================
|
|
|
|
# My Blog: www.Ryuzaki.in
|
|
# Social : Twitter.com/bariiiscan
|
|
# My Team: Grayhatz Inc. & Agedz Corp.
|
|
# Turkey. |