Ananda Image Gallery SQL Vulnerability

                                                Exploit Title:Ananda Image Gallery SQL Vulnerable
Vendor url:http://www.softwebsnepal.com/
Version:n/a
Price:159$
Author: L0rd CrusAd3r aka VSN [[email protected]]
Published: 2010-06-17
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
all ICW members.
Spl Greetz to:inj3ct0r.com Team, Andhra hackers.com

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Description:

Unlimited photo upload:
This software helps you to upload unlimited photo to you website.
click here for Thumbnail

Auto Thumbnail and Auto photo aspect ratio creater:
This software automatically create thumbnail of uploaded photo and also
mange aspect ratio of the uploaded photo with the thumbnail photo so there
will be no photo tear and also you can manage the compression rate of
uploaded photo.

Admin Panel:
This software comes with admin panel form where you can upload photo, create
category and subcategory.


Categories and subcategories:
Admin can create unlimited category and subcategory, it is very easy to
create any number of hierarchical categories.
click here for Thumbnail


Profile Setup :
Admin can change profile form control panel, which will appear in contact us
page.
click here for Thumbnail

Password Setup :
Admin can change password form their control panel.
click here for Thumbnail

Easy Setup:
Setting up this software is very easy. Just unzip the files and upload it to
your server. then just set one file and you are ready to go.

~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*SQLi Vulnerability

DEMO URL :

http://[site]/gallery/default.asp?id=[sqli]


# 0day n0 m0re #
# L0rd CrusAd3r #


-- 
With R3gards,
L0rd CrusAd3r