BPHolidayLettings 1.0 Blind SQL Injection

=========================================
BPHolidayLettings 1.0 Blind SQL Injection
=========================================


[x]========================================================================================================================================[x]
 | Title    : BPHolidayLettings SQL Blind Vulnerabilities                                                                                   |
 | Software : BPHolidayLettings                                                                                                             |
 | Vendor   : http://bpowerhouse.info                                                                                                       |
 | Date     : 22 September 2009 ( Indonesia )                                                                                               |
 | Author   : OoN_Boy                                                                                                                                                                                                                                  |                                                                                                   |
[x]========================================================================================================================================[x]
 | Technology   : ASP.NET 2.0                                                                                                               |
 | Database     : MSSQL 2005                                                                                                                |
 | Version      : 1.0                                                                                                                       |
 | License      : GNU GPL                                                                                                                   |
 | Price        : $28.50                                                                                                                    |
 | Description  :BPHolidayLettings Holiday Lettings Site Script where site users can search holiday lettings all over the world, check      |
 |               availability and contact property owners. Owners can register and advertise properties for rent, mark available days,      |
 |               upload pictures and receive bookings                                                                                       |
[x]========================================================================================================================================[x]
 | Google Dork : cari sendiri yah :)                                                                                                        |
[x]========================================================================================================================================[x]
 | Exploit  : http://localhost.com/search.aspx?rid=[sql]                                                                                    |
            : http://localhost.com/search.aspx?tid=[sql]                                                                                    |
[x]========================================================================================================================================[x]



#  0day.today [2018-01-05]  #