Bs Auction Script suffers from a remote SQL injection vulnerability.
08f439f8feea097d5395a3b615bacf3786ff355cffa30c835fcdf6c94996333a
1 ########################################## 1
0 I'm Sid3^effects member from Inj3ct0r Team 1
1 ########################################## 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
Name : Bs Auction Script Sqli Vulnerability
Date : july 5,2010
Critical Level : HIGH
vendor URL :http://www.brotherscripts.com/
Price:$24.95
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
Description :
Site design of the demo may not match the product theme you are interested. The demo is just for the demonstration purposes. For the actual design, enlarge the image given above. In addition, many functions are disabled in demo.
Begin your own professional online auction website with BrotherScripts just right now. Our auction software has many functions, well designed and easy customizable templates for the lowest possible price. The Quality and good Support guaranteed!
#######################################################################################################
Xploit :BSQli Vulnerability
DEMO URL :http://server/Auction_Software/confirm.php?id=[sqli]
###############################################################################################################
# 0day no more
# Sid3^effects