Ananda Image Gallery – SQL Injection

  • 作者: L0rd CrusAd3r
    日期: 2010-06-17
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/13902/
  • Exploit Title:Ananda Image Gallery SQL Vulnerable
    Vendor url:http://www.softwebsnepal.com/
    Version:n/a
    Price:159$
    Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
    Published: 2010-06-17
    Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to
    all ICW members.
    Spl Greetz to:inj3ct0r.com Team, Andhra hackers.com
    
    ~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
    
    Description:
    
    Unlimited photo upload:
    This software helps you to upload unlimited photo to you website.
    click here for Thumbnail
    
    Auto Thumbnail and Auto photo aspect ratio creater:
    This software automatically create thumbnail of uploaded photo and also
    mange aspect ratio of the uploaded photo with the thumbnail photo so there
    will be no photo tear and also you can manage the compression rate of
    uploaded photo.
    
    Admin Panel:
    This software comes with admin panel form where you can upload photo, create
    category and subcategory.
    
    
    Categories and subcategories:
    Admin can create unlimited category and subcategory, it is very easy to
    create any number of hierarchical categories.
    click here for Thumbnail
    
    
    Profile Setup :
    Admin can change profile form control panel, which will appear in contact us
    page.
    click here for Thumbnail
    
    Password Setup :
    Admin can change password form their control panel.
    click here for Thumbnail
    
    Easy Setup:
    Setting up this software is very easy. Just unzip the files and upload it to
    your server. then just set one file and you are ready to go.
    
    ~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
    
    Vulnerability:
    
    *SQLi Vulnerability
    
    DEMO URL :
    
    http://[site]/gallery/default.asp?id=[sqli]
    
    
    # 0day n0 m0re #
    # L0rd CrusAd3r #
    
    
    -- 
    With R3gards,
    L0rd CrusAd3r