City Directory Review and Rating Script SQL Injection Vulnerability

2012-12-24T00:00:00
ID 1337DAY-ID-20042
Type zdt
Reporter 3spi0n
Modified 2012-12-24T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            # Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability
# Date: 22.12.2012
# Author: 3spi0n
# Script Vendor or Software Link:
http://b-scripts.com/en/18-city-reviewer-yelp-clone.html
# Category: WebApps
# Type: SQL Injection [MySQLi]
# Tested On: Ubuntu 12.10 - Win7
 
=================================================
# Demo: http://b-scripts.com/demo/city_reviewer/
 
# MySQLi Detected On:
http://server/city_reviewer/search.php?category=6
 
 
=================================================
 
# My Blog: www.Ryuzaki.in
# Social : Twitter.com/bariiiscan
# My Team: Grayhatz Inc. & Agedz Corp.
# Turkey.

#  0day.today [2018-04-11]  #