Sites designed by IRIX suffer from a remote SQL injection vulnerability. Note that this finding houses site-specific data.
2e1d97b25f5cf62f82dd3038d4d74f2fdf27973b47773218d61fd699c2992eeb
=================================================
# [~] Exploit Title: XRIX SQL Injection
Bug
# [~] Google Dork : inurl:"intext:website designed and developed by XRIX
inurl:/newsdetails.php?newsid="
# [~] Exploit
Author:FarbodEZRaeL
# [~] Version: ALL
Versions
# [~] Tested on:XP
# [~] Support WebSite : www.xrix.com.au/
=================================================
# [+] RFU Exploit
:
# http://WebSite.Com/[path]/newsdetails.php?newsid=[SQLi]
# [+] Demo
:
# http://www.cbdcycles.com.au/newsdetails.php?newsid=465
=================================================
# Tnx to
# Mr.XpR -UnknowN- Syamak Black - Samim.s
# Love War -Sianor - IRIST - Fixxer - All iranian Hackerz
================================================
# HomePage:www.Iranhack.org
================================================