CityVariety Corporation SQL Injection Vulnerability

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0
_
__
__
__
1
1
/' \
__ /'__`\
/\ \__ /'__`\
0
0
/\_, \
___
/\_\/\_\ \ \
___\ \ ,_\/\ \/\ \ _ ___
1
1
\/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\
0
0
\ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/
1
1
\ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\
0
0
\/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/
1
1
\ \____/ >> Exploit database separated by exploit
0
0
\/___/
type (local, remote, DoS, etc.)
1
1
1
0
[x] Official Website: http://www.1337day.com
0
1
[x] Support E-mail : mr.inj3ct0r[at]gmail[dot]com
1
0
0
1
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
1
0
I'm phiA Member From Inj3ct0r TEAM
1
1
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-1

- Use it at your risk,,,
- Made In Indonesia

---------------------------------------------------------------------------!
# Exploit Title: CityVariety Corporation SQL Injection Vulnerability
# Date: June 15 . 2012
# Author: phiA
---------------------------------------------------------------------------!
#E-mail : [email protected]
# Category: [webapps] 0day
#Vendor : http://www.cityvariety.co.th/
---------------------------------------------------------------------------!
# Google dork: intext: powered by CityVariety Corporation
#Security risk : Critical
# Tested on: BackTrack 5
# Demo site: http://ladyaocity.go.th/index.php?options=photo&mode=detail&id=1569
http://buengsanat.go.th/index.php?options=photo&mode=detail&id=1569
http://chansen.go.th/index.php?options=photo&mode=detail&id=1569
http://udomthanya.go.th/index.php?options=photo&mode=detail&id=1569

and many more at google !

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Thankz to : Indonesian Grey Hat Team, Jakarta Anonymous Club , BlackNewbie Team , Depe , Arai
Maulana ,n0Xtra and all Indonesian People.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++



#  0day.today [2018-03-19]  #