InterTech (etemplaite.php) Sql Injection Vulnerability

======================================================
InterTech (etemplaite.php) Sql Injection Vulnerability
======================================================

   010101010101010101010101010101010101010101010101010101010    
   0                                                       0
   1        Iranian Datacoders Security Team 2010          1
   0                                                       0
   010101010101010101010101010101010101010101010101010101010


# Exploit Title: InterTech (etemplaite.php) Sql Injection Vulnerability         
# Date: 21/09/2010                             
# Author: H-SK33PY                      
# Software Link: http://www.intertech.ps/
# Version :  N/A 
# Platform / Tested on: php/linux 
# Google Dork : inurl:Etemplate.php?id= & intext:"By: InterTech Co.
# Category: webapplications
# Code : [SQL injection]

#BUG:#########################################################################


After after use String (') and find bug  for injection at sites run SQL Inject :


example : 
http://[PATH]/etemplate.php?id=1[SQL injection]


Good Luck 

#############################################################################
Our Website : http://www.datacoders.ir/


Special Thanks to : Immortal Boy & Sp|R|T & BigB4NG & mehrdadab7 & hosinn & r00t & 3r1ck & The.3zar &  NIK  

                                        All Iranian DataCoders Members

Greetz to : Proxyserver All Members of HackrzHub.com 

#############################################################################



#  0day.today [2018-01-05]  #