# Exploit Title: 360ideas Sql Injection Vulnerability # Date: 30/10/2011 - 22:40 # Author: 3spi0n # Software Website: http://www.360ideas.com/ # Tested On: BackTrack 5 - Win7 Ultimate # Platform: Php >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> [$] Vulnerable File: Event.php and other .php files. [$] Dorks: "Site by 360ideas.com" [$] Demo Sites: [~] http://www.waukee.org/event.php?id=141" [PhpSQLi] [~] http://www.highlandvillage.org/event.php?id=4" [PhpSQLi] >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> # We attempted to work, you can not imagine. >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> # Contact: Http://3spi0n.Net/ # Greetz: Http://DarkDevilz.in/ >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> Mr.PaPaRoSSe Black_Umo ALEXTRAX Brs_BaRoN ZyX x-Leader Legend Coder DARKCOD3R Santiq0 53rh4t PerS ExDeaTH [And DD'z Family] [DarkDevilz - Defence And Destruction Group'z - TURKEY] >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>