1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 |
# Author: R4dc0re # Exploit Title: T-Dreams Cars Ads Package SQL injection Vulnerability # Date: 04-12-2010 # Vendor or Software Link:http://t-dreams.com # Category:WebApp #Version:2.0 #Price:31$ #Contact: R4dc0re@yahoo.fr #Website: www.1337db.com #Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members Submit Your Exploit at Submit@1337db.com ######################################################################################## [Product Detail] . JPhotos Upload to Database . Up to 3 images per ad . Car Makers & Car Models Categories . Secure Members Area . Member places many ads . Web Based Administrating Area . Easy to register Forms . Information & Users Privacy . Easy to merge with existing sites . MS Access Included . SQL Upgrading is enabled . Open Source Code [Vulnerability] SQL Injection: http://server/processview.asp?key=[Code] ######################################################################################## |