Realtor WebSite System E-Commerce idfestival SQL Injection Vulnerability

2010-05-28T00:00:00
ID 1337DAY-ID-12430
Type zdt
Reporter CoBRa_21
Modified 2010-05-28T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ========================================================================
Realtor WebSite System E-Commerce idfestival SQL Injection Vulnerability
========================================================================


Author : CoBRa_21
 
Script Home : http://www.redcatstudios.net/
  
Dork : "Web Site Design by Red Cat Studios"
 
-------------------------------------------------------------------------------------------
  
SQL Injection:
  
http://localhost/[path]/sponsorslist.php?idfestival=-7 (SQL)
http://localhost/[path]/index2.php?idfestival=7 (SQL)
http://localhost/[path]/venues.php?idfestival=7 (SQL)
http://localhost/[path]/getpasses_new.php?idfestival=7 (SQL)
http://localhost/[path]/awards.php?idfestival=7 (SQL)
http://localhost/[path]/mailing.php?idfestival=7 (SQL)
http://localhost/[path]/news.php?idfestival=7 (SQL)
http://localhost/[path]/filmlist.php?idfestival=7 (SQL)
http://localhost/[path]/calendar.php?idfestival=7 (SQL)
http://localhost/[path]/gallery.php?idfestival=7 (SQL)
http://localhost/[path]/gallery.php?idfestival=7&idgallery=56 (SQL)
http://localhost/[path]/contact.php?idfestival=7 (SQL)
http://localhost/[path]/  (All Files).php?idfestival= (SQL)
 
-------------------------------------------------------------------------------------------  



#  0day.today [2018-02-09]  #