Lucene search
K

Business Classified Listing SQL Injection

🗓️ 16 Jun 2010 00:00:00Reported by L0rd CrusAd3rType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 19 Views

Business Classified Listing SQL Injection - Own your business guide/directory with reviews, driving directions, and pictures. Charge restaurant owners for listing, offer basic listings for free. Includes free business cards, email support, logo, domain name, unlimited email addresses, web space, PayPal integration, advertising guide, and search engine submission

Code
`1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0  
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 1  
0 [+] Site : Inj3ct0r.com 0  
1 [+] Support e-mail : submit[at]inj3ct0r.com 1  
0 0  
1 ########################################### 1  
0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1  
1 ########################################### 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
Author: L0rd CrusAd3r aka VSN [[email protected]]  
Exploit Title:Business Classified Listing SQl Vulnerable  
Vendor url:http://www.webvolume.co.uk  
Version:8  
Price:n/a  
Published: 2010-06-15  
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW members.  
Spl Greetz to:inj3ct0r.com Team  
  
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~  
  
Description:  
  
Own your own business guide/directory, with reviews, driving directions and pictures. This website allows you to charge the restaurant owners a fixed amount per year of a listing. It also gives you the option to offer basic listings (ones without pictures, opening hours etc) for free.  
  
Whats Included?  
  
# FREE business cards to advertise your new business/website  
# Full email support via our helpd desk for the life time of your website  
# Logo for your website  
# Your own domain name  
# Unlimited email addresses for your website  
# Unlimited email forwarders - so your website email can be forwarded to your existing email address  
# Unlimited web space - so as your site grows it will never run out of disk space  
# All money made from your website is yours to keep - it goes directly to your PayPal account  
# Free advertising and promotion guide  
# Free basic search engine submission for 1 month to get you started  
  
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~  
  
Vulnerability:  
  
*SQLi Vulnerability  
  
DEMO URL :  
  
http://businessclassifiedlisting.webvolume.co.uk/TypeSearch.asp?typeID=[sqli]  
  
# 0day n0 m0re #  
# L0rd CrusAd3r #  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation