######################################### #|---------------------------------------------------------------------- #| Exploit Title : EasySiteNetwork SQL Injection Vulnerability #| #| Exploit Author : Ashiyane Digital Security Team #| #| Vendor Homepage: http://www.easysitenetwork.com/ #| #| Google DorK ONE: Powered by EasySiteNetwork #| #| Google DorK TWO: inurl:/recipe.php?recipeid= intext:Powered by EasySiteNetwork #| #| Date: 19 / 3 / 2015 #| #| Tested On : windows se7en + linux Kali #| #|---------------------------------------------------------------------- ######################################### #|---------------------------------------------------------------------- #| ~ ~ ~> Location <~ ~ ~ #| #| /Patch/recipe.php?recipeid=[SQL] #| #| http://www.gastXronomies.gr/recipe.php?recipeid=2269 #| #| http://www.graXndmaspantryva.com/recipes/recipe.php?recipeid=2 #| #| http://homes-Xn-gardens.com/recipes-from-the-kitchen-garden/recipe.php?recipeid=487 #| #| http://winemXakersdream.myvnc.com/recipe.php?recipeid=65 #| #| http://90naXpos.uw.hu/recipe.php?recipeid=63 #| #|---------------------------------------------------------------------- ######################################### #|---------------------------------------------------------------------- #| Discovered by : SeRaVo.BlackHat [+] H.4.S.S.4.N [+] #|---------------------------------------------------------------------- #########################################