[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Free Advertisment cms (user_info.php) SQL Injection Vulnerability
# Published : 2010-05-11
# Author : XroGuE
# Previous Title : e-webtech (page.asp) SQL Injection Vulnerability
# Next Title : PHP Gamepage SQL Injection Vulnerability
=========================================================
Free Advertisment cms (user_info.php) SQL Injection Vulnerability
=========================================================
##########################################
# Name: Free Advertisment cms (user_info.php) SQL Injection Vulnerability
# Date: 2010-05-11
# vendor: http://www.laserayaneh.com
# Author: Ashiyane Digital Security Team
# Thanks to: khodam :P, Satanic2000,Veron, ... And All Ashiyane Members ...
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: www.Ashiyane.org
##########################################
[+] Dork: " inurl: user_info.php?user_id= " Or " inurl: index.php?catid= "
[+] Vulnerability:
www.site.com/[path]/user_info.php?user_id=[SQLi]
www.site.com/[path]/index.php?catid=[SQLi]
##########################################