Ananda Image Gallery SQL Injection

`  
  
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0  
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 1  
0 [+] Site : Inj3ct0r.com 0  
1 [+] Support e-mail : submit[at]inj3ct0r.com 1  
0 0  
1 ########################################## 1  
0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1  
1 ########################################## 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1  
Author: L0rd CrusAd3r aka VSN [[email protected]]  
Exploit Title:Ananda Image Gallery SQL Vulnerable  
Vendor url:http://www.softwebsnepal.com/  
Version:n/a  
Price:159$  
Published: 2010-06-17  
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to  
all ICW members.  
Spl Greetz to:inj3ct0r.com Team, Andhra hackers.com  
  
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~  
  
Description:  
  
Unlimited photo upload:  
This software helps you to upload unlimited photo to you website.  
click here for Thumbnail  
  
Auto Thumbnail and Auto photo aspect ratio creater:  
This software automatically create thumbnail of uploaded photo and also  
mange aspect ratio of the uploaded photo with the thumbnail photo so there  
will be no photo tear and also you can manage the compression rate of  
uploaded photo.  
  
Admin Panel:  
This software comes with admin panel form where you can upload photo, create  
category and subcategory.  
  
  
Categories and subcategories:  
Admin can create unlimited category and subcategory, it is very easy to  
create any number of hierarchical categories.  
click here for Thumbnail  
  
  
Profile Setup :  
Admin can change profile form control panel, which will appear in contact us  
page.  
click here for Thumbnail  
  
Password Setup :  
Admin can change password form their control panel.  
click here for Thumbnail  
  
Easy Setup:  
Setting up this software is very easy. Just unzip the files and upload it to  
your server. then just set one file and you are ready to go.  
  
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~  
  
Vulnerability:  
  
*SQLi Vulnerability  
  
DEMO URL :  
  
http://www.mycheapdesign.com/gallery/default.asp?id=[sqli]  
  
  
# 0day n0 m0re #  
# L0rd CrusAd3r #  
  
  
--   
With R3gards,  
L0rd CrusAd3r  
  
  
  
`