v-eva.com Classified Script v5.1 SQLi Vulnerability

2010-06-28T00:00:00
ID 1337DAY-ID-13026
Type zdt
Reporter Sid3^effects
Modified 2010-06-28T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            ===================================================
v-eva.com Classified Script v5.1 SQLi Vulnerability
===================================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :  v-eva.com Classified Script v5.1 SQLi Vulnerability
Date : june, 28 2010
Critical Level     : HIGH
Vendor Url : http://www.v-eva.com/products/Classified-Script-v5.1.html
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!Te,n4pst3rr
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
Classified Script v5.1

Professionally developed PHP Classifieds script that was built with you - the site owner - in mind and to assist you in generating income

from your website. Whether you are running classifieds for autos, motorcycles, bicycles, rv’s, guns, horses, or general merchandise, our

product is the right package for you.

    * Allow buyers and sellers to communicate directly
    * List each item with image, description, pricing, and others
    * Charge a listing fee or let sellers do it for free
    * Broadcast your ads contents via RSS feed
    * Set the listings to require approval or auto-approve
    * You can have map on site for each listing
    * You can change design for your site with single click. You can also request us for custom design.

###############################################################################################################

Xploit: SQLi VUlnerability

 
DEMO URL : http://www.classifieddemo.com/classified_img.php?clsid=[injection code]

###############################################################################################################
# 0day no more
# Sid3^effects 



#  0day.today [2018-03-02]  #