Keralainfotech CMS SQL Injection

2012-09-08T00:00:00
ID PACKETSTORM:116372
Type packetstorm
Reporter Crim3R
Modified 2012-09-08T00:00:00

Description

                                        
                                            `<!--  
  
________ .__ __________________   
\_ ___ \_______|__| _____ \_____ \______ \   
/ \ \/\_ __ \ |/ \ _(__ <| _/   
\ \____| | \/ | Y Y \/ \ | \   
\______ /|__| |__|__|_| /______ /____|_ /   
\/ \/ \/ \/   
M3Mb3R OF AjaxTm   
-->  
############################################################################  
# Exploit Title: Keralainfotech CMS sql injection  
# Google Dork: "Powered by Keralainfotech.com"  
# Date: 9/7/2012  
# Author: Ajax Security Team  
# Discovered By: Crim3R  
# Home: WwW.AjaxTm.CoM  
# Vendor Software: http://keralainfotech.com/  
# Version: All Version  
# Category:: webapps  
# Tested on: GNU/Linux Ubuntu - Windows Server - win7  
############################################################################  
==================================  
sqli  
[+] view.php?id=[id][sqli]  
  
D3m0:  
  
http://www.amaladermatology.com/view.php?id=1  
  
http://chaithanyaclasses.com/view.php?id=4  
  
===============Crim3R@Att.Net=========  
  
[+] Greetz to All Ajaxtm Security Member  
  
Cair3x - HUrr!c4nE - E2MA3N - S3Ri0uS - iM4n - Sc0rpion - Daniyal  
devilzc0der - Dominator - Hossein.R1369  
`